Share President Robert Rosen says the 50-year-old 
mainframe user group still has some life left in it. PAGE 14 


Cisco tries to make it easier for users to 
manage its Catalyst 6500 switches. PAGE 7 
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Instant messaging 
isinuseatmore than 
80% of large corp- 
orations, whether the 
IT departmentlikes 
itornot. Here’sarun- 
down ofstrategies for 
managing the security 
risks. Page 31 
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Kee (Sem VPNs Gain With Users; 


Frame Relay Declines 


IP-based virtual networks tapped to improve security, support new apps 


BY MATT HAMBLEN | 
Corporate purchases of IP vir- | 
tual private network services 
continue to surge forward, a | 
trend that analysts said is be- 
ing accompanied by  _ 

a shift away from the 
use of frame-relay 
technology to carry 
network traffic. 

IT executives who 
are rolling out IP 
VPN connections 
said last week that 
the networks pro- 
vide better security 


Microsoft Delays Team Tool _ 
As Users Look to Collaborate — 


IT execs face need to link dispersed developers 


lati) amr Vt | 
drove AMF to VPN. 


than dial-up systems and 
many other current approach- 
es. They added that VPNs also 
can help keep networking 
costs in check, allowing them 
to vastly increase 
bandwidth to handle | 
new applications. 

For example, The 
Stride Rite Corp., a 
footwear retailer in 
Lexington, Mass., to- | 
day will announce 
plans to deploy an IP | 
VPN connecting 264 
stores nationwide. 





BY HEATHER HAVENSTEIN | 
Microsoft Corp. last week 
pushed back the ship date of a 
key component of its Visual 
Studio 2005 Team System. The 
delay in shipping Team Foun- 
dation Server postpones Mi- 
crosoft’s entry into a burgeon- 
ing market for collaborative 
software that can link devel- 
opers in far-flung locations. 

Analysts said that as IT op- 
erations use more remote de- 
velopers, the need for change 
and configuration manage- 
ment tools, version control 
software and even weblogging 
tools is growing. 

Team Foundation Server, a 
server-based product that sup- 
ports integrated version con- 


| automated build capabilities, | 


trol, reporting, work item 
tracking, process guidance and | 
will ship in the first quarter | 
of 2006 instead of on Nov. 7, 
Microsoft said. The remaining 
components of Visual Studio 
2005 — including the other 
pieces of Team System — will 
still ship on that date, accord- 
ing to Microsoft. 

Meanwhile, the company 
will now add on Nov. 7 a third 
beta release of Team Founda- 

Microsoft, page 48 





The new network will replace 
dial-up services with a con- 
stant VPN connection at each 
store and upgrade available 
bandwidth from 56K to 


| 384Kbit/sec. or more, said 


Stride Rite CIO Yusef Akyuz. 
That will help the retailer 
accommodate a new point- 
of-sale system and added 
VPNs, page 16 


Higher Than 
Projected 

BY LUCAS MEARIAN 

For the largest U.S. banks, an 
international regulation re- 


quiring tighter operational risk 
controls is proving to be far 


|} more costly than expected for 


IT, according to users and ana- 
lysts interviewed last week. 
The new Basel Capital Ac- 


cord, or Basel II framework, 


will require that about 20 of 
the nation’s largest banks use 
IT systems to measure credit 
and operational risk in order 
to ensure that they have 
enough capital on hand to 
cover their risks. 

An Accenture Ltd. survey of 
large U.S. banks released last 
month found that dozens are 
spending significant sums to 
comply with Basel II. Most of 
the respondents said they also 
fear that the strict Basel II 
conditions will only slightly 

Basel, page 48 
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AT DEADLINE 


India Plans Registry 
Of Outsourcing Staff 


Next month, India’s National As- 
sociation of Software and Service 
Companies will begin work on an 
online national registry of workers 
at business process outsourcing 
firms. The proposed registry, 
which is intended for use in 
employee background checks, 
could help reduce the risk of crim- 
inal activity, according to some 
industry insiders. 


Novell Profits Slump 
On Revenue Decline 


Novell Inc. reported a 91% drop in 
third-quarter profit on a slight de- 
cline in revenue as the company 
continues to shift its focus from 
NetWare to Linux. 
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Several Charged 
In Win 2k Hack 


Several people in Turkey and Mo- 
rocco have been arrested for their 
suspected involvement in the re- 
cent spate of computer worms 
targeting Microsoft Corp.’s Win- 
dows 2000 operating system. 
Microsoft worked with Turkish 
and Moroccan authorities and 

the FBI in the effort to find the 
alleged culprits. The worms, 
known as Zotob, Rbot and Myteb, 
enabled hackers to take control of 
infected PCs. 


Infor Global Buys 
PLM Vendor 


ERP software maker Infor Global 
Solutions has acquired Formation 
Systems Inc., a maker of product 
life-cycle management (PLM) 
tools, for an undisclosed sum. 
Three-year-old Infor has steadily 
scooped up other software com- 
panies to create its ERP software 
line. Infor will sel! Formation’s 
Optiva software as a stand-alone 
product until the PLM tool is inte- 
grated into its offerings. 
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BY CAROL SLIWA 
ICROSOFT CORP. 
last week dis- 
closed plans to 
change the initial 
service pack of bug fixes and 
enhancements that had been 
| planned for its Virtual Server 
2005 software into an “R2” 
product upgrade that some 
users may have to buy. 

There have been no major 
feature changes since Micro- 
soft announced a beta version 
of what was supposed to be 
Service Pack 1 for Virtual 
Server 2005 in April, said a 
company spokesman. But 
Microsoft officials decided 
that the update’s performance 
and availability improvements, 
64-bit compatibility and other 
planned enhancements 
“passed the bar” necessary for 
a full product release, said 
Zane Adam, a director of mar- 
keting for Windows Server. 

Users who bought a Soft- 
ware Assurance maintenance 
| package for the virtualization 
software as part of a volume 
licensing deal with Microsoft 
will be able to get the R2 up- 
grade for no extra cost, Adam 
noted. But those who didn’t 
purchase the maintenance 
plan will have to pay for R2. 

“It would probably be a sig- 
nificant issue for us if we had 
deployed [Virtual Server] in 
more areas and we didn’t have 
Software Assurance,” said 
Michael Brown, a support ser- 
vices manager at the Denver 
Health and Hospitals Authori- 
ty Inc. “This is certainly differ- 
ent from Microsoft’s tradition- 
al model.” 

Microsoft users are accus- 
tomed to getting a service 
pack update following the re- 
lease of an enterprise product, 
Brown added. He said Denver 
Health will test the R2 up- 
grade when the final version is 
released later this year. 





| 
| 





Like Denver Health, four 
other users contacted by Com- 
puterworld said they pur- 
chased Software Assurance 
packages for Virtual Server, 
which allows multiple copies 
of an operating system to be 
run on a single computer. 

“Usually, if we’re going to 
use something long term, we 
buy it with Software Assur- 
ance,” said Stan Johnson, a 
desktop and LAN services 
manager for the Multnomah 
County government in Port- 
land, Ore. “So the fact that 
they’re doing a new product 
release isn’t a significant con- 
cern to me.” 


Beyond a Service Pack 
Demond Hatter, a technical 
analyst at Exelon Corp. in 
Chicago, said he typically con- 
siders a service pack to be ori- 
ented toward bug fixes. “If this 
is more of a functionality en- 
hancement, I can see it not be- 
ing a service pack,” he said. 
Virtual Server users who 





‘Microsoft Puts Price on 
Virtual Server Upgrade 


Says it warrants product release; users 
| without Software Assurance have to pay 


Tati reliets aye) 
Road Map 
= The planned SP1 update for 
Virtual Server 2005 has been 
changed to an R2 product up- 


grade, scheduled for release in 
PRC ater gm 


® A new version is due next 
Nir) eee UREN 
hardware virtualization tech- 
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Intel and AMD. 
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ization code will be built into 
the Longhorn server version of 
Windows, but Microsoft says it 
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lack Software Assurance’s up- 
grade protection won't miss 
out on critical bug or security 
fixes, according to Adam. 
However, they won't get the 
rollup of fixes that comes with 
a typical security pack unless 
they opt to buy R2. 

Microsoft “sweated” over 
the decision to make R2 a 
product release, Adam said. 
But, he added, the company 
was in a somewhat unique sit- 
uation with Virtual Server, 


New Intel Chips to Run Slow, Save Power 


SAN FRANCISCO 


THE NEW architecture that will 
grace Intel's processors starting 
in the second half of 2006 bor- 
rows many of the design phi- 
losophies that have made the 
company’s Pentium M proces- 
sors a success, Intel executives 
said last week. 

Intel President and CEO Paul 
Otellini, in his keynote address at 
the Intel Developer Forum here, 
confirmed the company's plans 
to release new dual-core chips 
for desktops, notebooks and 
servers based on a common 
power-saving architecture. 

The architecture carries for- 
ward some of the technologies 
found within the Pentium 4's 
Netburst architecture, such as 


64-bit technology and virtualiza- 
tion features, said Stephen 
Smith, a vice president in Intel's 
Digital Enterprise Group and 
general manager of its desktop 
platforms unit. 

However, the design laid out 
by Intel has much more in com- 
mon with the Pentium M proces- 
sor family and its focus on sav- 
ing power, analysts said. 

It will appear in the second 
half of 2006 with the introduc- 
tion of the Merom processor for 
notebooks, the Conroe CPU for 
desktops and the Woodcrest 
device for servers. 

Intel's new architecture dials 
down the power and the clock 
speed by using only 14 stages to 
process data, meaning the chips 
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since it has been on the mar- 
ket only since last October. 

Adam said Microsoft stud- 
ied the Virtual Server cus- 
tomer base and found that the 
majority of users with multi- 
ple copies of the software have 
Software Assurance as part of 
volume licensing contracts. 

Microsoft provided an up- 
date on its virtualization plans 
at last week’s Intel Developer 
Forum in San Francisco. The 
software vendor’s long-term 
virtualization road map calls 
for a thin hypervisor layer of 
code supporting virtualization 
capabilities to be built into the 
next major release of Win- 
dows Server, code-named 
Longhorn. But Microsoft has 
said that the hypervisor tech- 
nology won’t make it into the 
initial Longhorn server release 
due sometime in 2007. 

In the interim, Microsoft in- 
tends to develop a second full 
version of Virtual Server that 
will follow the R2 release. Last 
week, it outlined plans to ship 
a beta copy of that version in 
the first half of 2006 and the 
finished software in the sec- 
ond half of the year. 

The promised new features 
include support for Intel 
Corp.’s performance-boosting 
virtualization technology, VT, 
as well as Advanced Micro 
Devices Inc.’s rival Pacifica 


approach. @ 56460 


will do more work per stage and 
can therefore run at slower clock 
speeds, Smith said. 

Merom and the other new 
chips will also be able to process 
four instructions per clock cycle, 
Smith said. 

Nathan Brookwood, an analyst 
at Insight 64 in Saratoga, Calif., 
called that feature a significant 
improvement that will allow the 
processors to do even more work 
per cycle than the Pentium M. 

Another notable improvement 
in the new design is the ability of 
its memory caches to share 
data. That feature, which was 
first designed into the Yonah 
dual-core mobile processor due 
out in the first quarter of next 
year, will be extended to all chips 
starting next year. 

~- Tom Krazit, IDG News Service 
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Cisco Expects IOS Upgrade to Ease 
Management of Catalyst Switches 


New modularity features aim to speed 
software upgrades and switch restarts 





BY MATT HAMBLEN | 
Cisco Systems Inc. today plans 
to announce an upgrade of 

the Internetworking Operat- 
ing System software for its 
flagship Catalyst 6500 Series 
switches, supporting increased 
modularity that’s designed to 
improve operational efficien- 
cy for IT managers. 

The new features, which are 
scheduled to become available | 
on some Catalyst 6500 models 
late this year, should enable 
faster restarts of the switches 
and reduce the time it takes 
users to install software 
upgrades, said John Yen, 
senior manager of switching 





product marketing at Cisco. 
The updated switch offering 
is based on technology built 
into the CRS-l carrier-class 
routing system that Cisco 
introduced in May 2004. 
Overall, the technology has 


been in the works 


for the past three 
years. Asked why 
the technology 
wasn't available 
sooner, Yen said, “It 
takes this long for 


| something like this.” 


American Century 
Investments in Kan- 
sas City, Mo., has 
tested the enhanced 
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Ontario Gov't to Take Control 
Of Controversial IT System 


BY MARC L. SONGINI 

The government of Ontario 
next month will take control 
of a controversial 3-year-old 
welfare payment system that 
critics say is still underper- 
forming and failing to deliver 
a return on investment. 

The Social Delivery Model 
Technology (SDMT) system 
was custom-written by Accen- 
ture Ltd. to modernize and im- 
prove business processes at 
the Ontario Ministry of Com- 
munity and Social Services 
(CSS). Accenture has run the 
system for the ministry since 
its installation in 2002. 

The five-year development 
project started in 1997. Accen- 
ture was to be paid no more 
than $151 million but eventual- 
ly billed $206 million. The 
overall price tag ballooned to 
an estimated $335 million. 

Since the SDMT system 
went live in 2002, end users 
have complained about down- 
time and difficulties with 
usability and stability, which 





has provoked political contro- 


versy [QuickLink 48520]. 
One chapter of the saga will 


end on Sept. 30, when Accen- 


ture’s contract to run the sys- 
tem expires. In a statement, 
the CSS claimed that knowl- 
edge transfer with Accenture 


| has been completed and that 
| the ministry is “fully prepared” | 


to assume maintenance and 


| support responsibilities. 


| Lingering Dissatisfaction 


But criticism of the system 
continues from some corners. 
“No one can say that the 
public got value for its mon- 
ey,” said Ontario legislator 
Shelley Martel, a member of 
the provincial parliament from 
the Nickel Belt region. “The 


computer system doesn’t work | 
| the past year, and rigorous 


the way it was supposed to af- 


| ter all this time. People have to | 


go in and manually make 
changes when they should be 
done directly online. I don’t 
know what the government 
can do to fix the computer 
problems at this point.” 
Some regional welfare ad- 
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IOS on 60 Catalyst 6500s dur- 
ing the three-year develop- 


| ment cycle, said Dave Rogers, 


senior IT network manager at 


| the financial services firm. He 


estimated that the increased 
modularity will reduce the 
time American Century spends 


| upgrading the software on all 
| 60 switches from six week- 
| ends to about six hours. 


= “This capability 

s actually allows us to 
do software up- 
grades immediately 
without production 


downtime or waiting | 


until a scheduled 
maintenance win- 
dow,” Rogers said in 
an e-mail interview. 
American Century 
plans to install the 


| ministrators last week agreed 
| that there are outstanding is- 
| sues with the system — pri- 


marily the fact that it’s still 


| difficult to use. 


For example, Janet Menard, 


| a director of Ontario Works in 


the Region of Peel, said the 


| system is rules-driven and 


complex. Adjustments related 


| to policy changes can be made 
| only during regular upgrades, 
| she said, which can cause 


problems for her operation. 
Without offering details, 


| a CSS spokesman said via 


e-mail that many improve- 
ments have been made to the 
underlying technology. For 


| example, the system has been 


tweaked so that the ministry 
can reduce the number of con- 
sultants needed to run it. 

In addition, the spokesman 
said that response times have 


| improved, system availability 


has been running at 99% over 


testing is regularly undertaken 
prior to enhancement rollouts. 
For its part, Accenture 


| stands by the results of the 
| project. “Accenture’s work for 


Ontario has helped create a 
welfare delivery system that 
operates more efficiently than 





upgrade next year, Rogers 


said. He noted that the soft- 


ware will also allow automatic 


| recovery of a single network- 
| ing process within a switch 


without interrupting the flow 
of data for other processes 

For example, if a routing 
table gets corrupted and needs 


the new capabilities in IOS 
will enable that work to be 
done without affecting func- 
tions such as the management 
of port configuration data, 
said Zeus Kerravala, an analyst 


in Boston. 

Previously, IT shops have 
had to resort to shutting down 
entire switches to perform 


| maintenance tasks, often on 


weekends, Kerravala said. 

He added that Juniper Net- 
works Inc. offers similar func- 
tionality on routers but not 
switches, while Extreme Net- 
works Inc. supports some of 
the capabilities on its switch- 
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es. But the Catalyst 6500 in- 
stalled base is enormous, and 
users have been asking for the 
functionality for a long time, 
Kerravala and others said. 
“The IOS update is a pretty 
big one,” said Mark Fabbi, an 


| analyst at Gartner Inc. “It will 
| certainly make the life of net- 
| to be cleaned up and restarted, | 


work operators easier. I’ve al- 


ways considered one of Cis- 


co’s Achilles’ heels to be oper- 
ations, and this clearly helps 


| make things better.” 


Yen said the update will be 


| added to Cisco's IOS 12.2SX 
at Yankee Group Research Inc. | 
| for users of the Catalyst 6500 

| Supervisor Engine 720, which 


release in the fourth quarter 


is aimed at data center appli- 
cations. The new features are 


| due to become available in the 
| first quarter of 2006 for cus- 


tomers using the lower-end 
Supervisor Engine 32. 
The update also includes 


| new software that can help IT 
| . 
| Managers automate routine 


| tasks, Yen said. @ 56443 


Study Finds Many IT Failures in Ontario 


SOME 40% of all IT projects 
undertaken by the provincial 
government of Ontario fail to 
meet goals in some way, ac- 
cording to a report issued last 
month by a task force of govern- 
ment and academic officials. 
The province's IT projects are 
missing targets in a variety of 
ways, including cost overruns, 
the inability to achieve expected 
benefits, and the loss of support 
and momentum, the study 
found. In many cases, the “re- 
suits [are] well short of hoped- 
for outcomes,” the report said. 
The report has already 
prompted the government to 
adopt a portfolio management 
approach on all major IT proj- 
ects, said Government Services 
Minister Gerry Phillips in a state- 
ment. In addition, plans are un- 
der way to create a scorecard- 


at any time in its history,” stat- 
ed Accenture partner Alden 
Cuddihey, in an e-mail. 

He claimed that the Ontario 
government has paid the addi- 
tional $55 million billed by Ac- 
centure out of savings, not 
with tax dollars. 


based system to assess risks 
and ensure that projects are in 
line with priorities. 

The task force was commis- 
sioned in September 2004 by 
the province's Ministry of Gov- 
ernment Services. 

The report, titled “On the 
Management of Large-Scale In- 
formation & Information Tech- 
nology Projects.” was commis- 
sioned in part because of the 
perceived shortcomings of the 
Social Delivery Model Technolo- 
gy welfare system created by 
Accenture, according to an 
agency spokesman. 

Among the recommenda- 
tions of the task force was that 
the Ontario government “signifi- 
cantly increase the strength of 
its governance of major opera- 
tional transformations.” 

- Marc L. Songini 


Despite the system’s trou- 
bles, Menard also believes that 
it is an improvement over its 
predecessor. The SDMT has 
“taken us well beyond other 
welfare jurisdictions in terms 
of technology,” she said. “It’s a 
good foundation.” @ 56462 





8 COMPUTERWORLD August 29, 2005 


ui 


BEA to Buy Portal 
Vendor Plumtree 


BEA Systems Inc. has agreed to 
buy portal software maker Plum- 
tree Software Inc. for around 
$200 million in cash. Analysts 
had expected a larger company 

to buy the struggling Plumtree, 
which will add a new line of col- 
laboration software to BEA’s port- 
folio. The deal is expected to close 
in the next few months. BEA said 
the Plumtree portal will be aimed 
at a different audience than its 
own WebLogic Portal software. 


Microsoft, Artemis 
Settle Lawsuit 


Microsoft Corp. has reached a 
confidential settiement in a trade- 
mark infringement case brought 
against it by biometrics company 
Artemis Solutions Group Inc. Un- 
der the settlement, Artemis retains 
rights to its BioCert trademark and 
dismisses its suit against Micro- 
soft. In May, Microsoft began 
licensing a patented technology 
called BioCert to third parties. 


WiMax Testing 
Due to Begin Soon 


The WiMax Forum is expected to 
finish validating a system for cer- 
tification testing this week. Some 
vendors already have products at 
the Cetecom SA lab in Malaga, 
Spain, the testing site. The forum 
is currently validating test scripts 
and equipment. The WiMax Forum 
expects formal testing to begin in 
October, with the first products 
certified by the end of the year. 


E-commerce Sales 
Up 26% in Q2 


Online retail sales in the second 
quarter reached $21.1 billion, up 
26% from $16.8 billion a year 
earlier, according to the U.S. Cen- 
sus Bureau. Total retail sales for 
the quarter were $940.8 billion, 
up 8.4%. Online travel services, 
financial brokers and dealers, and 
ticket agencies aren’t included in 
the survey. 





NEWS 


L ONTHEMAR 


MATTHEW FAULKNER 


Death to :) and :-( and 
“=> and the Like! Let ... 


. .. Natural communications recommence. A world with- 
out emoticons would be a far better place. It could 
happen if more companies embrace unified messag- 
ing technologies, suggests Andrew Feit, senior vice 
president of marketing at Adomo Inc. in Cupertino, 


Calif. “Business messaging 
swung over to text because 
there was a record of it with 
e-mail,” Feit argues. Tradi- 
tional voice mail systems 
hobble users by not letting 
them easily view and priori- 
tize messages, he says. But 
with unified messaging, 
v-mail becomes aural e-mail, 
letting you see who has con- 
tacted you and then deter- 
mine which message to listen 
to first. You can also store 
voice mail or pass it along 

to anyone with an e-mail 
account. Feit says those capa- 
bilities will “swing the pendu- 
lum back toward voice com- 
munication because it’s more 
efficient than text.” Plus, he 
adds, “it’s easier to express a 
feeling to the recipient.” So, 


Adomo Voice Messaging for 
Exchange appliance 





you'll no longer have to pon- 
der which emoticon best rep- 
resents the sarcasm you want 
to express about, say, vendor 
product-delivery promises. 
No need to feel cynical about 
the delivery of Adomo’s 
Voice Messaging for Ex- 
change appliance. It’s being 
announced today but has 
been shipping for two weeks. 
Feit says the device connects 
your Microsoft Exchange 
servers to your private 
branch exchange. V-mails are 
routed to your Outlook fold- 
er, and if callers are listed in 
your address book, their in- 
formation is displayed. Ac- 
cording to Feit, capabilities 
due by year’s end include a 
speech-based autoattendant 
that can find names in a com- 
pany directory through voice 
or keypad prompts. Another 
upcoming feature will let out- 
side callers schedule meet- 
ings with Adomo users by 
checking their Outlook calen- 
dars via voice. Pricing for the 
appliance starts at $12,000. 





Proprietary mobile 
e-mail protocols are . . . 
. . . likely to fall victim to the 
open-source movement. So 
claims Fabrizio Capobianco, 
CEO of Funambol Inc. in 
Redwood City, Calif. That 
spells trouble for the existing 
protocols from Research In 
Motion Ltd. and Microsoft 
Corp., he predicts. “Mobile 
e-mail will clearly be a com- 
modity,” Capobianco says. 
“And in such a market, open- 
source wins.” Funambol’s 
Sync4j soft- 
ware is an 
open-source 
application 
server for 
mobile de- 
vices that in- 
cludes e-mail, 
calendaring 
and contact 
management 
apps plus 
data synchronization tools for 


CAPOBIANCO 
FEM Le) 11 
Cure Tm) 
Reet a a 


BlackBerry, Palm, Symbian 


and Windows Mobile de- 
vices, as well as Java-based 
phones and even iPods. (AI- 
though iPods don’t yet have 
mobile phone capabilities, 
they do have contact lists that 
can be updated with Sync4j.) 
Capobianco says a 3.0 release 
due late this year will deliver 
e-mail and other apps to any 
cell phone that supports the 
Sync ML standard, which is 
being driven by the Open 
Mobile Alliance, a consor- 
tium of more than 200 com- 
panies. Sync4j 3.0 will also 
add support for apps based 
on Microsoft’s .Net Compact 
Framework technology. 


Ex-cop now deters 
cybercrime with. . . 

. .. tools designed to protect 
sensitive corporate data. Jim 
Pante once collared fraud and 
vice criminals in New Jersey, 
but he has shifted his talents 
to nabbing thieves trying to 
sneak data out of your enter- 
prise. Pante is the CEO of San 
Mateo, Calif.-based Tablus 
Inc., which sells Content 








www.computerworld.com 


HOT TECHNOLOGY TRENDS, NEW PRODUCT 
NEWS AND INDUSTRY BUZZ BY MARK HALL 


Alarm, an appliance with 
software that crawls your net- 
work looking for data types to 
protect [QuickLink 54822]. 
Content Alarm then enforces 
your data-protection policies. 
This fall, Tablus will add its 
controls to 
mobile devices 
that connect to HH 
corporate net- 
works. Pante Sr ri 
Pe) 
says that you are victims of 
emu eS 
says Utah’s 


need to con- 
trol content 
Plugaru cee 


not just for 
intellectual 
property and identity-theft 
reasons, but also because 

it’s increasingly a crime 

not to do so. He also notes 
that global security teams 
need to account for all the 
unique laws in different 
nations. Content Alarm in- 
cludes policies for complying 
with U.S. and European 
Union regulations. Pricing 
starts at $25,000. 


Detect whether remote 
computers comply 
. . . with corporate security poli- 
cies, even if they aren’t connect- 
ed to your network. That trick 
is one of the new features be- 
ing added this week by LAN- 
Desk Software Inc. in South 
Jordan, Utah, as part of a 
Security Suite 

8.6 upgrade. 

According to 

Kevin Auger, 

LANDesk’s 

product line 

manager, a 

Management 

Gateway mod- 

ule adds a bit 

of client code to laptops that 
senses when the machines 
are on the Internet and then 
connects them to your Secu- 
rity Suite server. The soft- 
ware checks to see whether 
your devices are up to date 
with antivirus software, 
patches or anything else you 
set in your security policies. 
Pricing for Security Suite 8.6 
starts at $59. @ 56421 
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FINALLY... 


NO LIMITATIONS. NO IMITATAONS. 


Business Intelligence made a promise: to make it simple for everyone to use information to make 
better decisions. But, given your complex IT infrastructure, the reality of getting a single BI standard 
in place across the company has been anything but simple. Until now. 

Introducing Cognos 8 Business Intelligence, the one solution built to break down the barriers limiting 
BI’s potential. With a complete Web Services-based SOA. A simple browser-based interface. A full range 

of BI capabilities — reporting, analysis, scorecarding, dashboarding and more — all in a single product 
and on a single architecture. And the BI foundation for companies demanding a simpler path to a complete 
performance management system. 


It’s everything BI promised to be. And now, it’s here. 
To learn more and to find out where you can preview Cognos 8, go to cognos.com/simple 


COGNOS 8 BUSINESS INTELLIGENCE. 


COGNOS 


THE NEXT LEVEL OF PERFORMANCE™ 


Copyright © 2005 Cognos Incorporated. All rights reserved. 
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M GET THE FACTS. 


RADIOSHACK COMPARED TCO AND FOUND WINDOWS SERVER SYSTEM 
WILL SAVE THEM MILLIONS. 


“In upgrading our aging UNIX-based servers, we considered both Windows Server™ and 
Linux. Windows Server System™ offered several advantages, including the ability to consolidate 
our in-store servers by 50% from 10,200 to 5,100—and a savings of several million dollars 
in hardware, software, systems management, and support costs.” 3 

—Ron Cook, Vice President and Chief Technology Officer, RadioShack ®) RadioShack. 


For these and other third-party findings, go to microsoft.com/getthefacts 


| 
ae 
Windows 
Server System 
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Sun Releases DRM 
As Open-Source 


Sun Microsystems Inc. will re- 
lease its digital rights manage- 
ment project under an open- 
source license, in hopes of driv- 
ing a unified standard to protect 
digital media such as music and 
movies. The Dream Project will 
be released in the coming weeks 
under the open-source Common 
Development and Distribution Li- 
cense. No other companies have 
yet joined in the effort. 


Fiorina to Write 
Career Memoir 


Carly Fiorina has signed a deal 

to pen a memoir about her career, 
which went on hiatus last Febru- 
ary following her ouster from 
Hewlett-Packard Co. after a tur- 
bulent five-year run as CEO. Due 
out in late 2006 from Penguin 
Group (USA) Inc.’s Portfolio unit, 
the book will include career high- 
lights and her views on topics 
such as leadership, technology 
and women in business. 


Novell to Buy Out 
Indian Partner 


Novell Inc. is acquiring its part- 
ner’s stake in Onward Novell 
Software (India) Pvt., a Mumbai, 
India-based sales and distribution 
joint venture. Novell has operated 
in India since 1992 as Onward 
Novell Software with Indian part- 
ner Onward Network Technologies 
Ltd. Novell’s development center 
in Bangalore, India, is already a 
subsidiary. 


U.K. Firm First to 
Use Sun Grid Utility 


AU.K. financial services software 
vendor has released an applica- 
tion that uses the pay-per-use 
Sun Grid compute utility, making 
it the first Sun Microsystems 
partner to use the technology. 
CDO2 Ltd. has finished a trial de- 
ployment on Sun Grid and is ready 
to sell the hosted application us- 
ing the pay-per-use feature. 





New York Signs Pact to_ 
Boost Iransit Security 


$212 million project includes rollout of 
software, cameras and sensors citywide 


BY JAIKUMAR VIJAYAN 
EW YORK’S Metro- 
politan Transporta- 
tion Authority 
(MTA) last week 

said it has chosen Lockheed 

Martin Corp. to be the prime 

contractor on a $212 million 

project to bolster security 
across all of its facilities. 
Under a three-year contract, 

Lockheed Martin will develop 

and deploy an infrastructure- 

protection system that will use 





thousands of cameras, as well 
as intelligent video and sensor 
technologies, to monitor New 
York’s subway system, com- 
muter-rail platforms, and 
highway bridges and tunnels. 
The integrated command, 
communications and control 
capabilities that the project 
will deliver should “harden” 
the transit system against fu- 
ture terror attacks, Bill Mor- 
ange, the MTA’s security di- 
rector, said in a statement. 


 LOCKHEED MARTIN is the prime security contractor for the MTA. 





The authority’s effort to bol- 
ster security comes just weeks 
after July’s terrorist bombings 
in London. The attacks there 
raised concerns about the vul- 
nerability of commuter-rail 


| and mass-transit systems in 


the U.S. and the IT challenges 
involved in protecting them 
[QuickLink 55438]. 

Charles Patterson, a mem- 
ber of the transportation 
security council at ASIS In- 
ternational, an Alexandria, 
Va.-based trade association 
for security professionals, 
called the New York plan one 
of the most advanced transit- 
security initiatives under- 
taken in the U.S. 

“T think it’s a very good and 
a very significant step in the 
right direction,” he said. 

“As far as I know, it’s the 
only large-scale systems inte- 
gration initiative [of its sort] 
in the country,” Greg Hull, 
director of operational safety 
and security at the American 
Public Transportation Associ- 
ation in Washington, said via 
e-mail. 

Rochester, N.Y.-based Lenel 
Systems International Inc. will 
provide the software support- 
ing core applications such as 


www.computerworld.com 


the access control, alarm mon- 
itoring and digital video sur- 
veillance systems. The MTA 
will also use technologies 
from vendors such as Arinc 
Inc., Skanska USA Civil Inc. 
and Intergraph Corp. 

The new system will give 
the MTA “a common opera- 
tional picture” across all of its 
facilities, said Mark Bonatucci, 
program manager for the ini- 


fe know, it’s the 
only large-scale 
systems integration 
initiative [of its sort] 
in the country. 


GREG HULL, DIRECTOR OF 
OPERATIONAL SAFETY AND SECURITY, 
AMERICAN PUBLIC TRANSPORTATION 
ASSOCIATION 


tiative at Bethesda, Md.-based 
Lockheed Martin. 

Each command center will 
be equipped with a bank of 
video screens for displaying 
feeds from cameras and sen- 
sors and showing satellite and 
image-based displays of MTA 
facilities. Alarms and alerts 
will be automatically forward- 
ed to the centers for analysis, 
and Bonatucci said the video 
screens will give workers 
recommended courses of ac- 
tion for handling situations. 
@ 56464 





Treasury Reopens Bidding 
For $1B Telecom Contract 


| AT&T deal was 
canceled in May 
amid protests 


BY LINDA ROSENCRANCE 
The U.S. Department of the 
Treasury is reopening bidding 
for a $1 billion communica- 
tions contract that was origi- 
nally awarded to AT&T Corp. 
late last year. That deal was 
canceled in May after com- 
petitors protested that the bid- 
ding process was unfair. 

The agency made the latest 
move after an unsuccessful ef- 





fort to find a contractor 
through the General Services 
Administration (GSA). 

The three-year Treasury 
Communications Enterprise 
contract, which includes sev- 
en one-year options, seeks a 
vendor to supply telecommu- 
nications services and support 
for more than 1,000 domestic 
locations and tens of thou- 
sands of users in the U.S. and 
overseas. 

The contract, initially won 
by AT&T in December, was 
canceled after protests were 
reviewed and upheld by the 





Government Accountability 
Office [QuickLink 54669]. 
Objections came from Broad- 
wing Communications LLC, 
Level 3 Communications Inc., 
MCI Inc., Northrup Grumman 
Information Technology and 
Qwest Government Services 
Inc. A sixth bidder, Sprint 
International Communica- 
tions Corp., didn’t contest 
the contract. 

In its decision, the GAO said 
the Treasury Department had 
not had discussions with all 
of the bidders and ordered the 
department to do so before re- 
awarding the contract. 

After canceling its deal with 
AT&T, the Treasury Depart- 
ment had said it would use the 
existing GSA programs and 





contractors for the work. 

However, in an e-mail state- 
ment last week, a Treasury 
Department spokeswoman 
said the department is moving 
forward with its own procure- 
ment effort because an evalua- 
tion found that no existing 
GSA contract could meet its 
communications needs. 

The Treasury Department 
also said it will implement the 
GAO’s recommendation to 
renegotiate with the other bid- 
ders and will give the vendors 
that had previously submitted 
proposals an opportunity to 
submit revised bids. 

Treasury officials didn’t 
give a timeline for the process. 
The GAO couldn't be reached 
for comment. @ 56457 
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Oracle Ships Overdue 
10g Collaboration Suite 


But year-late 
release maintains 
price advantage 


BY STACY COWLEY 
RACLE CORP. has 
shipped the newest 
version of its Ora- 
cle Collaboration 
Suite, two years after the soft- 
ware’s last major update and 
more than a year after its in- 
tended release date. 

Oracle launched its suite in 
2002, positioning it as a low- 
cost alternative in a market 
dominated by Microsoft 
Corp.’s Exchange and IBM’s 
Notes/Domino. The new 10g 
version was originally slated 
to ship by mid-2004. 





Although the Oracle suite 
can be used at non-Oracle 


| sites, Gartner Inc. analysts said 


in a report that they expect it 
will appeal mostly to Oracle 
customers who don’t need 
complex collaboration or mes- 
saging functionality. For such 
users, the software’s low price 
tag — $60 per named user for 
a perpetual license — could be 
very attractive, the report said. 

The IBM and Microsoft 
offerings include higher back- 
end and per-user costs. 

Pemco Aviation Group Inc. 
installed Oracle’s collabora- 


tion software two years ago 


after evaluating rival offerings 
from IBM, Microsoft and oth- 
er vendors, said John Griffith, 
director of IT at the aerospace 


Share President Still Sees 
A Future for User Group 


BY CHINA MARTENS 

Share, a Chicago-based 

user group that’s orient- 

ed toward IBM main- 

frame shops, is celebrat- 

ing its 50th anniversary 

this year [QuickLink 

52972]. The indepen- 

dent user group 

currently has about 

20,000 members, according to 
President Robert Rosen. Rosen, 
who is CIO of the National 
Institute of Arthritis and Mus- 
culoskeletal and Skin Diseases 
at the National Institutes of 
Health in Bethesda, Md., spoke 
with the IDG News Service be- 
fore last week’s semiannual 
Share conference in Boston. 


How has Share changed over the 
years? My first Share meeting 
was in 1970. Share was much 
more related to the scientific 
environment then. The joke 
about Share used to be there’d 
be all technical people talking 
bits in different corners. If you 
asked, “What’s the best way to 





s organize my help 
desk?” people would 
look at you as if you 
came from Mars. But 
probably from the mid- 
to late-’70s [onward], 
Share was also cover- 
ing business issues. 
The real difference 
back then was that 
when we talked to IBM, it was 
very much down at the bit and 
byte level. Now it’s very much, 
“What’s the business reason 
for this [product or feature]?” 


And how has the relationship 
between Share and IBM been al- 
tered? There have been ups 
and downs in the relationship, 
adversarial vs. working togeth- 
er. It depended on which part 
of IBM you were dealing with. 
We always had pretty good re- 
lationships with the develop- 
ers. At one point IBM said, 
“Here’s what we’re planning to 
do in the next two years,” and 
we had input into that. We still 
have that, but it’s done in a dif- 








services and repair company. 

Birmingham, Ala.-based 
Pemco had been using Ex- 
change, but upgrading to the 
latest version would have 
been prohibitively expensive. 
Oracle’s software offered more 
functionality at a lower cost, 
said Griffith. He has been 
beta-testing Oracle’s 10g re- 
lease for several months and 
expects to soon begin moving 
components of it into produc- 
tion for Pemco’s 650 users. 

Griffith said Pemco will 
quickly take advantage of the 
new Workspaces collaboration 
portal, which builds on con- 
tent management functionali- 
ty in Oracle Files but offers a 
unified user interface. 

Still, as a sign of how deeply 


ferent way, through technical 
steering committees, where 
the groups meet the whole 
weekend before Share with 
IBM, and the meetings don’t 
attract as much publicity. 
One big difference is that 
IBM has more ways to get in- 
formation [from users]. Back 
when I first started [with 
Share], when IBM came to a 
meeting, 80% of their cus- 
tomers would be there. Now 
IBM has customer councils, 








entrenched the market’s lead- 
ers are, Pemco’s employees 
still use Outlook as their front- 
end e-mail client. 

“When we switched, we did 
very little training,” Griffith 
said. “The users don’t know 
Oracle is on the back end.” 


Moving on Messaging 
Like the rival offerings, Ora- 
cle’s suite offers personal 
e-mail and calendar applica- 
tions, as well as collaborative 
tools such as group file man- 
agement and Web conferenc- 
ing. The 10g version adds 
long-awaited instant messag- 
ing functionality and the 
Workspaces feature. 

Despite offering a price tag 
that frequently undercuts Mi- 
crosoft’s and IBM’s, Oracle has 
gained little traction in the 
market, thanks in part to the 
suite’s more limited function- 
ality. Market research firm 
IDC estimates the 2004 world- 
wide market for “integrated 
collaborative environments” 


weblogs, a lot more sources of 
information. But one of the 
problems with getting infor- 
mation is that you need to val- 
idate it. How good is it? Who 
is this person, a crank or a 
CIO? Share offers a measure 
of quality of input. 


What about attendance at Share 
meetings? The attendance has 
been up and down. After 9/11, 
it was down some, but we’ve 
seen the trend reverse; it’s flat- 








www.computerworld.com 


at $1.9 billion, with Microsoft 
and IBM together drawing 
90% of that spending. Oracle 
registered seventh on IDC’s 
list, with 0.3% of the market. 

“The greatest challenge Or- 
acle faces is getting credibility 
in the messaging world,” said 
David Ferris, president of 
messaging and collaboration 
research firm Ferris Research 
Inc. in San Francisco. 

Despite the delay, users 
won't hold it against Oracle, 
since they’re getting the inte- 
grated technology they want- 
ed, said Mike Gotta, an analyst 
at Burton Group, a consultan- 
cy in Midvale, Utah 

The new offering should 
also reassure users that there 
is senior-level visibility and 
commitment from Oracle 
about collaboration, Gotta 
said. @ 56439 
Cowley writes for the IDG News 
Service. Computerworld’s 
Marc L. Songini contributed 
to this story. 


tened out, and [now] there’s a 
bit of an increase. Share’s still 
doing well; we've still got 
money in the bank. We still 
have a future. @ 56442 


Martens writes for the 
IDG News Service. 


MAINFRAME MAVENS = 


IBM and Share want to help young IT 
workers find mainframe jobs: 


QuickLink 56383 
www.computerworld.com 


Sarbanes-Oxley Seen as Biggest IT Time Waster in Poll 


Share members who responded 
to an online poll this month said 
they expect complying with the 
mandates of the Sarbanes-Oxley 
Act to be the least effective or 
most wasteful use of their IT 
resources in coming years, 
followed by the deployment 

of unproven technologies. 

The results of the poll, which 
was conducted from Aug. 4 to 15 
among people who had prereg- 
istered for Share’s Boston con- 
ference, were released last week 
as part of the event. 

Twenty-eight percent of the 


444 respondents cited Sar- 
banes-Oxley compliance as a 
time waster, while 23% chose 
the installation of unproven 
products. Another 19% opted 
for purchases of unneeded tech- 
nologies, and 17% picked con- 
tinued support of outdated hard- 
ware and software. 

Share President Robert 
Rosen said he wasn’t surprised 
that Sarbanes-Oxley is proving 
to be a major headache for IT 
managers and staffers. “It's oc- 
cupying a lot of people’s time, 
and they can’t figure out what 


the return on investment is 
there,” he said. 

Heightened information secu- 
rity is the emerging trend most 
likely to affect business comput- 
ing over the next five years, ac- 
cording to 31% of those who an- 
swered the Share poll. Two other 
significant trends identified in 
the poll are the shortage of quali- 
fied enterprise-class IT profes- 
sionals, and outsourcing or off- 
shoring of application develop- 
ment and maintenance. 

~- China Martens, 
IDG News Service 
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Fujitsu Sues Nanya Over 
Memory Chip Patent 
TOKYO 

UJITSU LTD. last week filed a 
Ferien infringement lawsuit 

against Taiwanese memory chip 
maker Nanya Technology Corp., seek- 
ing to prohibit the future importation 
and sale of synchronous dynamic RAM 
devices made by Nanya. 

The lawsuit was filed in Tokyo Dis- 
trict Court against Nanya’s local sub- 
sidiary, Nanya Technology Corpora- 
tion Japan. Tokyo-based Fujitsu is also 
asking the court to award it undis- 
closed monetary damages. 

The suit involves a patent related to 
a technology for improving the speed 
of double data rate SDRAM chips, a 
Fujitsu spokesman said. 
He added that Fujitsu 
took legal action after 
talks between the two 
companies failed to pro- 
duce an agreement on 
patent licensing. 

Nanya declined to com- 
ment on the lawsuit. 

“We haven’t received 
any information from Fu- 
jitsu yet, so we can’t com- 
ment right now,” said a 
spokeswoman at Nanya’s 





GLOBAL FACT 


May CMM ellie 
annual growth rate in 
spending on Ethernet 
switches in the Asia- 
Pacific region from 
2004 through 2009. 


An International 
IT News Digest 


headquarters in Taoyuan, Taiwan. 
m MARTYN WILLIAMS AND DAN NYSTEDT, 


| IDG NEWS SERVICE 


Vendor’s CEO Gives Up 
Taiwanese Citizenship 


TAIPE! 
HE HEAD OF China’s largest chip 
i has applied to give up his 
Taiwanese citizenship after a spat 

with the island’s government. The 
move highlights the troubles that chip 
industry workers from Taiwan face 
when doing business in China. 

Richard Chang, CEO of Semiconduc- 
tor Manufacturing International Corp., 
is a dual citizen of the U.S. and Taiwan, 
where he worked for years before 
founding Shanghai-based SMIC. But 
his involvement in SMIC 
riled the Taiwanese gov- 
ernment, which has strict 
rules governing how and 
when its citizens and 
Taiwan-based companies 
can invest in China’s 
semiconductor industry. 

The government levied 
a fine of 5 million new 
Taiwan dollars ($155,000 
U.S.) against Chang in 
March, saying that he 
failed to apply to authori- 





ties before investing in SMIC. Chang 
was given six months to withdraw his 


| investment or face further penalties. 


His attorney is fighting the case in 


| Taiwan, said an SMIC spokesman. 


Taiwan fears that chip investments 
in China could lead to job losses and 
that its technology could be used to 
bolster Chinese military prowess. 

m DAN NYSTEDT, IDG NEWS SERVICE 


| Motorola Says No to_ 
| Manufacturing in India 


BANGALORE, INDIA 
OTOROLA INC. plans to increase 
its staff in India by about 1,000 


by the end of next year, accord- 


ing to Chairman and CEO Edward Zan- 
| der. But the company has ruled out 
| plans to manufacture telecommunica- 


tions equipment in India, although it 
might look at doing some “back-end 
assembly” in the country, Zander told 
reporters here last week. 
Schaumburg, Ill.-based Motorola 
currently employs 2,900 people in 


| India — 2,500 at its research and de- 


velopment centers, and the rest in 


sales, marketing and support positions. | 


Some 1,100 Motorola employees 

are also working on projects with 
software development outsourcing 
companies in India, according to Amit 
Sharma, vice president of Motorola 
India. @ 56412 

mw JOHN RIBEIRO, IDG NEWS SERVICE 
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Briefly Noted 


SoftMaker Software GmbH in 
Dusseldorf, Germany, last week 
unveiled the beta version of a new 
release of its Windows-based 
TextMaker word-processing soft- 
ware. TextMaker 2005 is priced at 
$49.50 and can also run on the 
Linux, Windows Mobile, Qtopia and 
FreeBSD operating systems. 

m JOHN BLAU, IDG NEWS SERVICE 


Unisys Corp. last week signed a 
contract extension to manage call 
center services for Compania 
Anonima Nacional Telefonos de 
Venezuela, a telephone service 
provider. Under the deal, valued at 
about $12 million over two years, 
Unisys will continue to provide ser- 
vices ranging from operator assis- 
tance to customer service. 


Rambus Inc. and United Micro- 
electronics Corp. have inked a deal 
for Rambus to provide its PC! Ex- 
press-based chip-to-chip intercon- 
nects to the Taiwanese chip maker. 
Los Altos, Calif.-based Rambus 
announced last month that it had 
souped up its memory technology 
to improve picture quality in game 
consoles and high-end PCs. 

w DAN NYSTEDT, IDG NEWS SERVICE 





IBM Tivoli Unveils CDP Security Tool for the Masses 


figured to save files in write- 
once, read-many mode for 
data protection purposes. 


Product protects 


laptop, PC data 


BY LUCAS MEARIAN 
IBM last week released a new 
data-protection product that 
keeps a copy of files as 
changes are made, allowing 
users to dial back to recover 
any version of a document 
they want on local disks and 
on network servers. 

IBM said its new software, 
called Tivoli Continuous Data 
Protection for Files, provides 
real-time data backup for lap- 
tops, PCs and file servers by 
continuously protecting infor- 
mation from computer virus- 
es, file corruption, accidental 
deletion or theft of a laptop. 

Continuous data protection 





(CDP), or time-addressable 
storage, saves all changes at 
the bit level, time-stamps them 
and moves them off to local or 
networked disk to be stored. 

If a data restore is required, 
an end user or systems admin- 
istrator can literally dial back 
an application to any point in 
time, even to seconds before a 
virus struck a server. 

Walter Grey, IT manager at 
Consigli Construction Co. in 
Milford, Mass., rolled out 
IBM’s CDP software about a 
month ago to the laptops of 
half of the company’s 150 field 
workers. He plans to finish the 
rollout over the next several 
months. So far, Grey said, he 
likes the product’s ease of use, 
as well as the cost and time 
savings it brings his company. 





Backing up laptops used to 
be a full-time job at Consigli, 
because Grey had to send a 
technician into the field to 
back up each machine manu- 
ally. Now, when users log onto 
the company’s intranet via a 
virtual private network, local 
files are automatically backed 
up to a file server, which repli- 
cates the data to a back-end 
disk array, he said. 

Grey said the product 
“doesn’t take a lot of resources 
out of the machines and does 
the backup transparently. The 
fact that it does it transparent- 
ly is key. I don’t want [end 
users] to know how it works.” 

Brian Babineau, an analyst 
at Enterprise Strategy Group 
Inc. in Milford, said the only 
unique aspect of IBM’s ver- 





sion is that data can be backed 
up both locally and over an en- 
terprise network. “It’s an in- 
cremental market for those 
vendors who already have a 
backup product,” he said. 


Competitors’ CDP 
Babineau said Microsoft Corp. 
is expected to announce its 
own CDP product soon, and 
he anticipates that EMC Corp. 
will resell another vendor’s 
CDP product. Veritas Software 
Corp. has already announced 
plans to ship CDP products in 
2006 with two new backup 
applications code-named 
Panther and Bighorn. 

Chris Stakutis, chief tech- 
nology officer of the new IBM 
Tivoli Software offering, said 
the software can also be con- 





Stakutis said all previous 
versions of a file are kept in a 
folder tree, and the software 


tags the file with a sequence 


number for easy retrieval. The 
files are then presented in or- 
der of the date and time they 
were created. 

Pricing for IBM’s CDP starts 
at $35 for the desktop version 
and $995 for file servers. 


@ 56459 
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VPNs 


applications, Akyuz added. 

In another new deal, MCI 
Inc. last week announced a 
contract with AMF Bowling 
Worldwide Inc. in Richmond, 
Va., to connect 350 bowling 
alleys via MCI’s IP VPN 
Broadband Service. The VPN 
setup will replace a satellite 
communications system that 
sometimes suffers from slow 
performance, said Rohana 
Meade, vice president of IT 
at AMF. 

The deal between AMF and 
MCI is valued at $1.27 million 
over three years. Akyuz said 
the annual cost to Stride Rite 
for its VPN will be about 
$400,000 under a two-year 
contract with Paris-based car- 
rier Equant Inc. and GoRe- 
mote Internet Communica- 
tions Inc., a managed services 
provider in Milpitas, Calif. 

According to both Akyuz 
and Meade, cost was a major 
factor in their companies’ deci- 
sions to choose VPN services. 

AMF looked at connecting 
its bowling centers via frame 
relay a year ago, but that 
would have been “at least 
twice as expensive” as the IP 
VPN approach, Meade said. 

At Stride Rite, Equant has 
provided a frame-relay con- 
nection to manufacturing sites 
in China for the past two 
years, allowing shoe designers 
in the U.S. to talk with plant 
managers via videoconference 
links, Akyuz said. He added 
that Stride Rite considered 
various alternatives for con- 
necting its stores, but “at the 
end of the day, [a VPN] was 
the best solution.” 


VPN Advantages 


Nearly all the major network 
service providers are market- 
ing IP VPN offerings as a re- 
placement for frame relay, 
said Ron Kaplan, an analyst at 
IDC in Framingham, Mass. 
Kaplan said VPNs are usually 
less expensive than frame- 
relay networks, although the 
cost differences have nar- 
rowed as carriers have low- 
ered the price of frame relay 
to keep it competitive. 


Sales of IP VPN services in 
the U.S. last year amounted to 
$640 million, according to 
IDC, which forecasts that 
| sales will grow to $3.3 billion 
in 2009 — an annual growth 
| rate of nearly 40%. This year, 
sales are expected to total just 
over $1 billion, Kaplan said. 

Meanwhile, the number of 
frame-relay ports is declining. 
IDC counted 1.3 million ports 
in the U.S. last year, a number 
that is expected to drop to 
1.2 million this year and fall to 
751,000 in 2008, said analyst 
Steven Harris. “Frame [relay] 
is definitely decreasing, and 
more and more carriers are 
eliminating it completely,” 


| he said. 


An IDC survey of 400 U.S. 
companies that was released 


BY LUCAS MEARIAN 

Sun Microsystems Inc.’s $4.1 bil- 
lion acquisition of Storage Tech- 
nology Corp. is expected to 


| close next month, leaving in its 


wake a smaller inde- 
pendent tape-vendor 
market. Mark Canepa, 
executive vice president 
of the Network Storage 
Products Group at Sun, 
spoke with Computer- 
world last week about 
how the company plans 
to incorporate Storage- 
Tek into its storage operation. 


What is your overall strategy for 
incorporating StorageTek into 
Sun? We have 15 teams that 
are part of the integration 
process. Each is chartered 
with finding cost synergies 
in their area but also finding 
the revenue synergies. 


How many workers will be laid off 
as a result of this acquisition? 
We don’t know that yet. Obvi- 
ously, it would be very pre- 
mature to discuss that now as 
we're trying to operate as two 
separate companies. You can 
imagine the disruption that 
could have in both companies. 
Once we close, we'll be able 
to look at it in more detail and 
be able to make some more- 
explicit announcements. 





STRIDE RITE’S VPN will support 
a new point-of-sale system 
and added applications, says 
CIO Yusef Akyuz. 


in June found that IP VPNs 
had become the third most 
popular primary WAN config- 





How will StorageTek boost 
your storage strategy? We 

| don’t believe we’re product- 

| constrained. We believe we’re 

coverage-constrained. Our 
products and solutions 
and capabilities are in 
excess of the size of the 
sales force we've got 
out there. 

The first thing Stor- 

ageTek brings is 1,000- 
plus salespeople, which 
massively increases our 
coverage. The second 

thing it does is it augments 

[the] sales reps at StorageTek. 

The third area is that many 

StorageTek [customers] are 

not Sun customers. 

[This] allows us to expose 
[StorageTek customers] to 
more than just mainframe 
servers. Over time, we believe 
that can yield additional rev- 
enue synergies. 


How do you convince Sun’s 
300-person sales force to sell 
another company’s products? 
We're going to end up with 
one storage sales force. All of 
a sudden, there’s one price list. 
It’s not a Sun sales rep vs. an 
STK sales rep. They’re all 
going to be Sun sales reps. It’s 
going to be Sun’s storage prod- 
uct price list. They’re very 
rapidly going to be under 











uration, behind private lines 
and broadband links. Frame 
relay was fourth, and 55% of 
the respondents said they 
plan to migrate traffic away 
from that technology over the 
next two years. About one- 
third said they will shift to- 
ward VPNs. 

Stride Rite’s IP VPN will 
allow store workers to check 
on inventory at other nearby 
locations and will support a 
new customer-loyalty pro- 
gram. The faster perfor- 
mance should also significant- 
ly shorten checkout times for 
shoppers, with the payment 
process “taking seconds in- 
stead of minutes,” Akyuz said. 

Meade said AMF’s existing 
satellite network is shared by 
the 350 bowling alleys, with 


one set of rules and quota. 


What’s your go-to-market strate- 
ay for StorageTek’s products? 
We've been [reselling] a num- 
ber of STK products for a long 
time. For a number of other 
[products], they’re going to be 
on the Sun price list for the 
first time after the acquisition. 
A lot of the improvements in 
our go-to-market strategy is 
that we can begin to broadcast 
a much broader value proposi- 
tion. We can talk about [infor- 
mation life-cycle manage- 
ment] in much broader terms 
than what STK would do all 
by itself. 


Is your purchase of StorageTek 

a foreshadowing of further mar- 
ket consolidation? We think 

the IT market is in a consoli- 
dation phase. Sun CEO Scott 
McNealy talked about it. He 
said in general that we want to 
be one of the consolidators of 
the IT market. We intend to 


“e The first thing 
StorageTek 


brings is 1,000-plus 
salespeople, which 
massively increases 
our coverage. 
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downlinks running at up to 
12Kbit/sec. and uplinks as 
much as 256Kbit/sec. But de- 
pending on how many end 
users are on the network at 
once, “it could be very fast or 
very slow,” she added. 

MCI’s IP VPN service will 


| support 128Kbit/sec. or faster 


connections to each facility, 
allowing AMF to train workers 
via the Web and add a cus- 
tomer reservation system that 
lets bowlers book lanes online, 
Meade said. 

Stride Rite plans to connect 
24 shoe stores to its VPN by 
year’s end and bring the rest 
online by mid-2006. AMF has 
connected five bowling cen- 
ters thus far and plans to fin- 
ish its rollout within the next 
12 months. @ 56452 


Sun Exec Expects StorageTek Buy to Revive Sales 


be on the consolidating side 
of all of this. 


With Sun buying StorageTek and 
EMC partnering with ADIC, there 
aren’t a lot of independent tape 
vendors out there. You’re right. 
Right now, there’s Quantum, 
ADIC, IBM and Sun. You still 
have Overland [Storage] out 
there. We're definitely going 
to get down to a handful of 
archival companies. 


How do you address product 
overlap, particularly with your 
content-addressed storage line? 
We've been working pretty 
hard on that. We’re not in the 
position of revealing any data 
at this point. What I can tell 
you is you're going to find 
when you dig into this stuff 
[that] there’s a lot less overlap 
than might first appear. 


You've been losing market share 
to IBM, EMC and Hewlett- 
Packard. How do you regain it 
through this deal? The way we 
gain market share, we believe, 
is not primarily due to a big- 
ger product line. It’s being 
able to get feet on the street. 
It’s about being able to get 

a sales force out there that 
can go toe to toe with the 
storage sales forces of our 
competitors. @ 56440 








TIME WARNER CABLE 


The Point of Business 


The point of business is cost-effectively connecting enterprise resources to better serve your customers. With a wholly owned, end-to-end 
network—backed by a team of consultants working with you to develop the optimal solution for your environment—Time Warner Cable delivers 
reliable business communications. Add to that, standard and customized SLAs, along with a full suite of data, video, and security solutions— 
including Metro Ethernet, Teleworker Solutions, Branch Office Connectivity—and you have a scalable infrastructure-for sharing information, 


reducing costs and realizing the value on your IT investment. That's the point of business. 
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OPINION 


MARK HALL 


The Search War 


NEW BATTLE for the desktop is under 
way. This isn’t your old-fashioned Linux 
or Mac vs. Windows tussle, where ar- 
cane issues over operating systems en- 


thrall systems administrators and enthu- 


siasts while boring everyone else to tears. This turf 
war is about things that matter to end users, which is 
not necessarily the best news for IT. 


The latest salvo in the 
new desktop skirmish 
was fired by Google last 
week when it released 
Desktop 2, a search pro- 
gram for Windows PCs, 
and Google Talk, an in- 
stant messaging client. By 
combining those offer- 
ings with Gmail, its free 
e-mail service, Google 
now is kicking at Micro- 
soft’s castle gate, an- 
nouncing its attack upon, 
if not actually threatening, Red- 
mond’s long rule over the desktop. 

Google, of course, is not trying to 
displace Windows. In fact, it’s ex- 
ploiting Windows to deliver higher- 
level services that end users desire. 
These are services that someday 
may become revenue streams for 
Google. And you know that just 
grates on Microsoft. 

Desktop 2 is appealing. It im- 
proves the lives of information work- 
ers by combining the singularity of 
information on their own machines 
with the panoply of sources on the 
World Wide Web in a single search. 
It delivers the results in one relative- 
ly clutter-free window. It’s simple, 
yet amazingly powerful. 

Desktop 2 comes with Sidebar, a 
vertical strip that anchors the side of 
your PC’s display. Within its tiered 
windows, you get RSS feeds, news 
stories, e-mail from your Gmail and 
Outlook accounts, weather reports 
and other dynamic content. It’s slick. 

Desktop 2 is not to be confused 
with Desktop Search for Enterprise, 
which lacks Sidebar but can index and 
search everything its junior partner 





can, as well as content 
stored in Lotus Notes. 
The Enterprise version 
also gives administrators 
critical tools, such as the 
ability to define files that 
aren’t permitted to be in- 
dexed and to force all in- 
dexes on everyone’s ma- 
chines to be encrypted. 
Google recommends that 
you do this. 
Individuals can down- 
load the Enterprise ver- 
sion, just as they can the consumer- 
oriented Desktop 2, and use it on 
their own systems. My limited use 
of both tools leads me to conclude 
that they, or something very much 
like them, will become de facto on 
corporate machines. That’s because 
they are useful and easy to use. 
From IT’s perspective, though, 
Desktop 2 and Desktop Search for 





Enterprise are, at best, more software 
you'll need to understand, if only for 
the sake of handling queries from the 
clueless end users who haunt our 
Shark Tank each week. At worst, 
these indexing programs might be- 
come another security headache. 

I suggest that you get a head start 
on your end users and quickly roll 
out Desktop Search for Enterprise, 
or a comparable desktop search 
product that also efficiently searches 
online. (And no, the stupid puppy 
that comes with Windows XP does 
not qualify.) If that’s not possible, at a 
minimum set companywide policies 
for how those tools should be set up. 
Make encryption mandatory. It does 
slow down retrieval a bit, particularly 
when Notes files are being searched, 
but few end users will complain. 

Another problem I foresee for IT 
is that once users get accustomed to 
searching their desktop apps along 
with the Internet for content, they’ll 
be asking for you to use Google’s (or 
whoever’s) APIs to include corpo- 
rate apps in the single-search proc- 
ess. That’s more work and another 
security hole to cover. 

Is this potential troublemaker of a 
tool worth it? Yes, every penny. I did 
tell you that it’s free, right? @ 56422 
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DAN GILLMOR 


Vendors Are 
Keeping ‘loo 
Many Rights 


HEN I CONSIDER 

the big issues in the 

world of informa- 
tion technology and policy, I 
invariably return to a single 


word: control. 

Control encompasses any number of 
things. But as we move into an era of 
increasing digital content in our every- 
day lives and jobs, at the top of the list 
is the question of who’s in charge of 
information. 

At one time, we imagined that we 
were. We'd buy a product, and if we 
wanted to tinker with it, that was no 
one’s business but our own. Now, as 
ones and zeroes become embedded in 
everyday products and services, we an- 
swer to the sellers as much as the oth- 
er way around. 

Technology ven- 
dors strive for lock- 
in. They lock us in 
with obvious tricks, 
such as Microsoft 
with its file formats, 

a monopoly mecha- 

nism as pervasive as 

its Windows desktop 

control. They con- 

trol us with digital 

rights management 

(DRM, more proper- 

ly called digital re- 

strictions manage- 

ment) schemes that 7 —_ 
force us to break the law to make back- 
ups or even to quote from other works. 

They forbid us from tweaking or 
substituting, as ink-jet printer compa- 
nies try to do when they misuse copy- 
right laws to make life hard for other 
companies that want to sell us cheaper 
ink. They create cartels and impose 
rules like the DVD regional coding 
scheme, which keeps us from watching 
a movie we buy in Europe on a DVD 
player we bought in the U.S. 

Governments do their part. They use 
regulations to keep vital technology 
from becoming ubiquitous, such as the 
U.S. government’s export-control re- 
strictions that still give most e-mail 
messages all the data security of post- 
cards. It just goes on and on. 
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OPINION 





The most onerous controls are be- 
ing exerted against the least powerful 
players in this game: end users, who 
have the least individual leverage 
against big companies and govern- 
ments. IT has more leverage because 
it’s a bigger customer. 

No doubt, some in the IT communi- 
ty have used their leverage wisely, 
though the typical outcome seems to 
be a price reduction from vendors, not 
any serious divesting of vendor con- | 
trol. It’s not hard to understand why. 
The path of least resistance is always 
alluring when budgets and time are 
constrained. It was once true that no 
one got fired for buying IBM, partly 
because IBM, for all its monopolistic 
reach at the time, did a pretty good job. 
For all its ruthless business practices, 
Microsoft has been steadily improving 
products aimed at enterprises. 

The move toward open-source soft- 
ware has been one of the truly hearten- 
ing occurrences in recent times. IT has | 
seen the financial advantages, which 
may not be as overwhelming as open- 
source advocates claim but are none- 
theless real in many, if not most, cases. 

More important is the open-source 
advantage in the freeing of data and 
choice. Portability is the most essential | 
escape valve in any data relationship. If | 
you can move it without incurring 
massive costs, you have leverage. If 
you can’t, you don’t. With open-source 
products, you do. 

I have no religious attachment to 
open-source vs. proprietary software. I 
use both. But I consider my data mine, 
period, just as I consider it my right to 
back up what I buy and quote from oth- 
ers’ work — with appropriate citation 
— in creating new works of my own. 

The technology and entertainment 
industries don’t believe in such rights. 
For everyone’s sake, I hope IT will 
fight back, and hard. @ 56373 


VIRGINIA ROBBINS 


Fewer CS 
Majors Not a 
Big Concern 


Y NEPHEW Matthew 
is 21, an age when 
anyone who knows 


how to cook is his best friend. 
He has stopped growing, at 6 feet 3 
inches tall, but he’s still as skinny as a 
fishing pole. I love to cook, and at a 





recent family reunion, he 
joined me in the kitchen. 
I'd read that graduation 
rates for women in comput- 
er science were still hover- 
ing around 25% and that 
overall graduation rates for 
computer science majors 
had declined from a high 
point in 2000. Since Mat- 
thew is currently in college, 
I asked him for his observa- 
tions and why he hadn’t tak- 
en up computer science. 
I was pleasantly surprised 
to find that his roommate is in com- 
puter science. Matthew told me he’s 
really into gaming and entered com- 
puter science as a back door into mak- 
ing money in gaming. Yes, there are 
quite a few women in the classes, but 
male or female, they all look the same 
to Matthew: pale, out of shape and 
with long fingernails. These men and 
women aren’t antisocial. That myth 
was busted when advanced games 
started to be played over networks and 
the gamers all! began to interact online. 
Matthew said he isn’t in computer 
science because, well, the lifestyle isn’t 
for him. He needs something more 
active, interactive and tactile. 
Matthew’s story of his roommate 
echoed one I had heard at dinner a few 
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weeks earlier from a 
friend’s son. He, too, had 
decided to enter computer 
science so that he could do 
computer gaming. 

As someone who years 
ago started playing Pong 
and later spent many, many 
hours expanding houses in 
The Sims and shooting 
beasts in Diablo II, I under- 
stand why kids would want 
to be computer game de- 
signers and builders. It’s 
just that very few of these 


| skills are useful in the corporate world. 


(OK, there is a parallel that involves 
bathroom breaks. Neglect them in a 
long meeting or with your Sim, and 


| bad things happen.) 


Are all computer science students 
gamers? Of course not. But I think that 


| these two young men are not atypical 
| in wanting to build a career around 

} an enjoyable diversion. After all, mak- 
| ing a career around what you like is 


exactly what the book What Color Is 
Your Parachute? is all about. Outside 


| of simulation training, though, gaming 
| skills don’t help corporations. In fact, 

| very few computer science degrees 

| are useful to most corporations. 


Corporations need accountants, 
marketers, and operations and manu- 


| facturing staffers who are infused with 
computer skills. The PC and Internet 

| revolutions have been all about mov- 
ing information closer to the decision- 
maker and, in the corporation, closer 
to those who need the data. 

So is it a problem that fewer stu- 

| dents are graduating with computer 
science degrees? Absolutely not. If we 
assume that a capitalist society will 
continue to reward innovation and 
protect intellectual property, then the 
best minds will continue to migrate to 
the best research centers, regardless of 
where one graduates. 

Much has been said about the Uni- 
versity of Florida study on the effect of 
video-game violence on children. Just 
as I wouldn’t take Matthew’s 7-year-old 
cousin to an R-rated film, I wouldn’t let 
her play Doom or Grand Theft Auto, 
regardless of how much I enjoy the 
games myself. But I am encouraging 
her to play Sims and the huge stash of 
computer learning games that her fam- 
ily has given her. With gaming, we old- 
er ITers have found the way to win the 
hearts of teenagers and twentysome 
things everywhere. @ 56361 
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Wireless or Not, Trespassing Is Wrong 


OORAY for Richard Dinon and 

the St. Petersburg, Fla., police 
(“Man Arrested for Hopping Onto 
Home Wi-Fi Network,” QuickLink 
55503]. | hope that the state attor- 
ney prosecutes this criminal to the 
full extent of the law. 

lam especially appalled by the 
comments of Ken Dulaney of Gart- 
ner, who blames the homeowner 
for being the victim of the crime 
perpetrated upon him. Would Du- 
laney feel the same if his home 
were broken into or his identity 
stolen? Those acts, and the access- 
ing of another's wireless network 
without permission, are crimes, and 
if they were not criminal they would 
still be unethical. 

My guess is that Dulaney’s opin- 
ion does not align exactly with Gart- 
ner corporate policy. If | were to 
gain access to Gartner assets ille- 
gally, would the company feel that | 
then had the right to sell them be- 
cause Gartner did not protect them 
well enough? There may be differ- 


ences between the real and virtual 
worlds, but in either case, taking 
| what belongs to others is wrong. 
| Daniel A. Combs 
| President, 
| Global Identity Solutions LLC, 
Falls Church, Va., dan.combs@ 
globalidentitysolutions.com 


Old Lessons Anew 


T SHOULD NOT be surprising 

that consumers’ responses to pri- 
vacy breaches are similar to their re- 
sponses to other attacks on their 


| sense of personal security [“Opin- 


ion: After a Privacy Breach, How 
Should You Break the News?” 
QuickLink 55301]. Though the 
Ponemon Institute's findings ap- 


| pear to be among the first to ask 


these kinds of questions in situa- 
tions involving IT and the financial 
industry, these results aren't sub- 
stantially different from findings 
about consumer relations following 





the Tylenol and Excedrin scares of 


| mental findings in those situations, 
| school today, are that the compa- 
| nies whose products are involved 


; must be proactive about resolving 


| active approach to preventing fur- 





the last century. Two of the funda- 


| 


taught at virtually every business 


the problem and must take a pro- 


ther breaches. 


V. Hetrick 
Los Angeles 


A Home on the Web 
For OS/2 Refugees 


$/2 USERS [“0S/2 Loyalists 
Remain as the Operating 
System Fades Away,” QuickLink 
54736] still have a home on Com- 
puServe in the OS Refuge folder of 
the Linux Forum [QuickLink a6920). 
Members of CompuServe's former 
OS/2 forums still drop by. The Linux | 
Forum manager is one of the “OS/2 
advisers” of the late OS/2. 
Doug Yriart 
Manager, CompuServe 
Linux Forum, Washington, 
dyriart@compuserve.com 





Ham Radio Can 
Help in Emergency 


HE ANSWER to the problem 
outlined in the story “Attack in 


| U.S. Would Tax Emergency Track- 


ing for Cell Phone Users” [Quick- 
Link a6810}: Acquire an amateur 
radio license. This will give a person 
worldwide communications with 
just a small radio 

Kevin Adam 

Fort Wayne, Ind., 
n9iww@verizon.net 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will be edited for brevity and clarity 
They should be addressed to 
Jamie Eckle, letters editor, Com- 
puterworld, PO Box 9171, 1 Speen 
Street, Framingham, Mass. 01701. 
Fax: (508) 879-4843. E-mail 
letters@computerworld.com 
Include an address and phone 
number for immediate verification. 
For more letters on these and 


other topics, go to 
www.computerworld.com/letters 
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Up to Capacity 

Capacity planning helps companies 
locate current bottlenecks or 
wasted capacity, as well as 
strategize to meet future 
infrastructure needs. Page 24 


QUICKSTUDY 

Protocols 

A protocol is a set of formal rules that 
describe how devices or software can 
exchange information with one another 
across a computer or communications 


08.29.05 


SECURITY MANAGER'S JOURNAL 
Peers Say Cisco Ended Up 
Wearing the Black Hat 

After the brouhaha over the Cisco 
IOS vulnerability, C.J. Kelly asks 
some of her colleagues what they 


network. Page 27 


think of the situation. Page 28 





, DIRECTOR, CENTER FOR COMAUTATIONAL 


RESEARCH, THE UNIVERSITY AT BUFFALO 


Cluster 


Massive throughput and 
the ability to add capacity 
on the fly are making clus- 
tered storage an attractive 
option. 


USS MILLER RUNS a monster of a serv- 
er cluster that eats storage at an 
incredible rate. The bandwidth re- 
quirements alone on his 22TFLOPS 


system force Miller to look outside the 


storage box, so to speak, for better throughput and 
scalability. 

As the director of the Center for Computational 
Research at the University at Buffalo, Miller over- 
sees a supercomputer comprising 6,600 processors 
that is used by the university and many businesses 
in western New York. 

To support all that computational power, Miller 
turned to a clustered storage system that could alle- 





viate bottlenecks and automatically load-balance 
and grow on the fly to accommodate user demand. 

Like many IT managers who have seen the bene- 
fits of server clusters, Miller chose to try the rela- 
tively new technology of storage clusters as a means 
of attaining a fully redundant infrastructure that’s 
highly scalable and easy to manage. Clustering pro- 
vides massive throughput because of an increased 
port count that comes from cobbling many storage 
servers together into a single pool of disks and proc- 
essors, all working on a similar task and all able to 
share the same data. 

Management functions are distributed across the 
storage server farm. To an application server, the 
farm looks like a single, block-level storage system. 
Storage capacity can be added without disrupting 
applications running on the cluster. 

There’s lots of talk about storage clustering 
among vendors these days, but few market leaders 
have fully embraced the concept, according to ana- 
lysts. Most of the development is still being led by 
start-up companies such as Ibrix Inc., Isilon Systems 
Inc. and Intransa Inc. 

In April, Miller selected a system from Dell Inc. 
and Billerica, Mass.-based Ibrix that gave him stor- 
age read rates of 2.3GB/sec. and about half that rate 
for data writes — far above what any monolithic 
storage array could produce, he says. 

“We don’t have any single points of failure. So if 
and when we need to make additional investments 
in storage, we can do that without any major down- 
time or major reconfiguration. We didn’t see any 
downside to going this route,” Miller says. 

Tony Asaro, an analyst at Enterprise Strategy 
Group in Milford, Mass., agrees. “The beauty of 
some clustered architectures is you can start small 
and grow as much as you want,” he says. 

The University at Buffalo’s storage cluster consists 
of three EMC CX700 storage arrays, each with 70 
146GB drives that are managed with Ibrix’s software. 

“If one of these I/O nodes goes down, we won't 
lose anything except a little performance,” says 
Miller. 

Ibrix is a clustered file system than runs on hosts, 
but it can also run on storage arrays. For example, 
the internal disk drives on low-end Dell servers can 
be combined to create a storage pool. The result is a 
compute farm that also clusters its storage. “It adds 
no greater complexity by adding more servers to the 
cluster,” Miller says. 

In the future, he notes, the university will consid- 
er using commodity servers to create a storage 
cluster, “so long as the system meets the needs of 
our users and staff in terms of performance and 
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reliability.” 

There’s some confusion about the 
definition of clustered storage. Ven- 
dors describe several different tech- 
nologies as clustered storage — from 
disk pooling to virtualization. 

A true storage cluster should be able 
to scale linearly without bottlenecks or 
added management difficulty, accord- 
ing to Enterprise Strategy Group’s 
Asaro. 

“NetApp has been guilty of using the 
word clustering for many years. We 
used to use it as a fail-over term,” says 
Jeff Hornung, vice president of enter- 
prise file services and storage net- 
working at Sunnyvale, Calif.-based 
Network Appliance Inc. “Clustering 
for scalability is what we're talking 
about.” 

NetApp offers a dual-node cluster, 
or two network-attached storage 
(NAS) boxes together in a pair that 
provide greater redundancy but don’t 
fit what Asaro and others would con- 
sider a true cluster: a system with the 
ability to scale linearly without adding 
complexity. 


SSCSSHESSSESHESESESHSESSETESESSEEEESE 
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IBM’s SAN Volume Controller appli- 
ance and 3Pardata Inc.’s Inserv arrays 
allow storage clusters to grow in eight- 
node increments, but data sharing is 
confined within those eight nodes. 
Other companies, such as Isilon, Ibrix | 
and LeftHand Networks Inc., allow 
clusters to grow one node at a time, 
with data being shared throughout 
the cluster, no matter how large it 
becomes. 


Two Categories of Clusters 
Clustered storage falls into two cate- 
gories: systems that combine block- 
based data on a storage-area network 





(SAN), and those that create a com- 
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mon file name space across NAS filers. | *eeeeeeeeeeeresccccsscscecs 


To date, most of the major storage 


vendors — Hewlett-Packard Co., EMC 
| Corp., Hitachi Data Systems Corp. and 


NetApp — have released technology 
that can virtualize NAS systems by 


pooling disk capacity behind NAS en- 


gines. All claim to be developing or 
evaluating third-party clustering tech- 
nology as well. Meanwhile, start-ups 


| such as Isilon, PolyServe Inc. and 


Panasas Inc. are already offering clus- 


| tering software that runs across Win- 


dows and Linux. 

Sonja Erickson, vice president of 
technical operations at Kodak Easy 
Share Gallery, a service of Kodak 
Imaging Network Inc. in Emeryville, 


| Calif., says NAS clustering technology 


has already saved her company hun- 


| dreds of thousands of dollars in per- 


sonnel costs alone. 

The Kodak unit uses clustering tech- 
nology from both Seattle-based Isilon 
and Beaverton, Ore.-based PolyServe 
to connect hundreds of Wintel servers 
at Kodak that host its online digital 
photo image service. Erickson has a 
staff of five people to manage more 

than a petabyte of data on the servers. 
“In terms of staffing, since we in- 
stalled [a NAS cluster from Isilon] a 
year and a half ago, we’ve hired no ad- 
ditional staff,” she says. “That’s hun- 
dreds of thousands of dollars saved. In 
terms of efficiency, it takes only a day 
to get the systems up and running.” 
Prior to installing NAS clusters, 
Erickson used direct-attached SCSI 
arrays that lacked scalability and 
could take up to a month and a half to 
get online. In contrast, the PolyServe 
boxes require about a week, and 
Isilon’s take about a day, she says. 
EMC offers clustering technology in 
its Centera content-addressed storage 
array, as does HP through its Remote 
Installation Service platform. Both 
products, however, are targeted at on- 
line archival uses. “These are clusters, 
but the object is not performance,” 
says Bob Passmore, an analyst at 
Gartner Inc. in Stamford, Conn. 

Most of the large vendors are inter- 
ested in using Intel-powered servers 
for storage clusters because of the 
enormous growth in the use of Linux 
clusters in server farms. 

“The requirements for availability 
are a long way from what a bank would 
need. Typically, banks are looking for 
tons of computing and storage capaci- 
ty. And while you get lots of perfor- 
mance, the trade-off is low availability. 
IBM has a group focused on this prob- 
lem,” Passmore says. “But we’re going 
to see more and more of this stuff, es- 
pecially the cheap nodes used to create 


| 





Clustered 


Storage 
Isilon Systems Inc. 


Technologies 


inc. 
Inc. 
LeftHand Networks Inc. 
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storage clusters.” 

Most of the adoption of clustered 
storage is being spurred by the tech- 
nology’s relatively low cost, adequate 
performance and high levels of redun- 
dancy and throughput. 


| Reluctant User 


Ron Minnich, team leader of the Clus- 
ter Research Lab at Los Alamos Na- 
tional Laboratory in New Mexico, is a 
reluctant fan of clustered storage be- 
cause it scales with his needs and gives 
him the throughput to support a 1,024- 
node, $6 million Linux server cluster. 
The cluster, called Tank, works as a su- 
percomputer for crunching scientific 
equations. 

Tank is backed by a 64-node storage 
cluster from Fremont, Calif.-based 
Panasas. 

“In terms of pricing, it cost more 
than a NetApp [NAS array] per tera- 
byte,” Minnich says. “I have it mainly 
because of its ability to sustain 
throughput from our server cluster, 
which you can’t achieve with a stan- 
dard file servers, which have one net- 
work connection.” 

Minnich says that each of the stor- 
age blades on the Panasas system has 
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an individual Gigabit Ethernet connec- 
tion, giving him 64 individual network 


| connections. 


“It’s not as reliable as a mature prod- 
uct. I had computers when [the Net- 
work File System protocol] first came 
out. There was a certain failure rate. 
This system is like the early failure rate 
that NFS had years ago,” he says. 

Ron Godine Jr., manager of IT opera- 
tions at Royal Appliance Manufactur- 
ing Co. in Glenwillow, Ohio, had been 
supporting his Oracle lli ERP system 
with two EMC Clariion 4700 arrays 


| prior to buying LeftHand SAN Filers, 


which are clustered using Microsoft 


| Cluster Server for high availability. 


Godine laments that each time he 
had to upgrade his EMC array, there 
was an arduous series of planning and 
implementation steps that had to be 
carried out with the help of the vendor. 
“It became a fairly drawn-out process 
to get the equipment working and 
figure out a number of problems,” 
he says. 

The three-node cluster from Boul- 
der, Colo.-based LeftHand Networks 
gave Godine about 6TB of storage 
capacity for $31,000 — about half the 
cost of his EMC arrays. “And the main- 
tenance is significantly cheaper,” he 
says. “I was able to get the equipment 
up and running in-house. We thought 
we'd done something wrong because 
it was so simple.” 

Godine’s greatest concern in moving 
away from time-tested EMC equip- 
ment was the performance on the new 
cluster technology, which he says sur- 
prised him. 

“We found performance on this clus- 
ter faster than local disk and certainly 
much faster than using CIFS [Common 
Internet File System] on these mono- 
lithic file-sharing systems,” says 
Godine, who adds that when used in 
the SAN configuration, the cluster is 
comparable to monolithic boxes. 

Godine says the ability to scale as 
needed was also an enormous draw. “If 
we needed more bandwidth to hosts, 
we could do it by adding more building 
blocks,” he says. 

In theory, managing storage clusters 
should be no more difficult than man- 
aging a single array, but some users say 
their management interfaces could still 
use some tweaking. 

But most, like Godine, say clustered 
storage’s strengths outweigh its draw- 
backs. @ 56197 


CLUSTERED RO 


Priceline.com finds that clustered storage boosts the 
bottom line. Read more on our Web site: 


QuickLink 56207 
www.computerworld.com 
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LOBAL OIL COMPANY ConocoPhillips was 
all set to roll out SAP AG’s Business In- 
formation Warehouse for users in Perth, 
Australia, but the early reports on the 
project weren't good. 

“This was a high-profile project, and 
some application owners were telling me 
that the network had a 15-second delay,” 
says Dave Strobel, operations supervisor 
in ConocoPhillips’ global information 

systems network operations group. 

The application resided on servers in Bartlesville, 
Okla., where Strobel works, with a 2Mbit/sec. E1 
connection to Perth. There was a demand for more 
bandwidth. But a new international circuit would 
have entailed a significant multiyear expense and 
required 60 workdays to set up, meaning it wouldn’t 
be ready by the go-live date. 

So Strobel handed the problem off to Bethesda, 
Md.-based Opnet Technologies Inc., which had been 
trying to sell him its network capacity planning soft- 
ware. Opnet did some packet captures and ran tests 
that took a total of 1,400 seconds to execute, far longer 
than they should have. 

Opnet took the test results and modeled what 
would happen if the bandwidth to Australia was in- 


creased from 2Mbit/sec. to 20Mbit/sec. That cut only 
0.38 seconds off the 1,400 seconds. Next, it modeled 
what would happen if the capacity was cut to 256Kbit/ 
sec.; that added only 13 seconds to the transaction, a 
loss of less than 1%. “Bandwidth clearly wasn’t the 
issue,” says Strobel. 

“When we looked at that data and analyzed it with 
Opnet, we found that very little of it was network de- 
lay,” he says. “But we found a substantial amount of 
the delay was on the servers in Bartlesville.” 

The application team solved the problem with the 
servers, Conoco-Phillips didn’t have to spend money 
on a multiyear contract for a multimegabit interna- 


| 
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UPOr 
CAPACITY 


tional pipe, and Opnet made the sale. 

Capacity planning — the process of predicting IT 
needs, often with the help of software — has long been 
regarded as something of a black art. The feeling was 
that only a specialist with a degree in statistics could 
do it, and even then, the results were questionable. 

But capacity planning tools are becoming easier to 
use, and companies are finding that they can help 
solve a wide range of long- and short-term bottle- 
necks. Tools now autodiscover network devices and 
connections, for instance. And pull-down menus al- 
low for quicker configuring of models. Since those 
features shorten the time it takes to run scenarios 
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[LGo | 
and provide faster answers, the tools are being used 
ye current problems, not just to estimate the 
s that need to be included in next year’s bud- 
a result, the software is no longer shelfware. 
“The big thing that’s new in the area of capacity 
planning is that people are actually doing it,” says 
Laura DiDio, an analyst at Yankee Group Research 
Inc. in Boston. 
But as the tools have gotten better, the systems 
they need to model have gotten more complex. In 
many cases, users are no longer just trying to devel- 


op a utilization trend line for a single CPU or disk ar- 
Continued on page 26 
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Continued from page 24 

ray. Instead, they might need to model a multitiered 
Web application to see whether the latency will 
come from the database, the application or the Web 
server. And virtualization raises its own challenges, 
since in that case, users aren’t modeling against a set 
hardware configuration. 

“As the environment becomes more virtualized 
and companies take on dynamic provisioning, it is a 
whole different story,” says Audrey Rasmussen, a 
vice president at Enterprise Management Associates 
Inc. in Boulder, Colo. “The infrastructure will be 
morphing and changing so rapidly that a lot of ca- 
pacity planning methods will become irrelevant be- 
cause they can’t keep up with the speed of change.” 

A service-oriented architecture adds its own wrin- 
kle. “Then you don’t have control over the infrastruc- 
ture or even visibility into it,” Rasmussen says, “par- 
ticularly if you are subscribing to a service.” 


Getting the Data 


The process of creating an accurate and useful ca- 
pacity plan begins long before you start modeling the 
network or servers. First, companies need accurate 
information on what they have, how it’s being uti- 
lized and how well it’s performing. While this used 
to be a time-intensive manual task, it can now be 
done automatically, so capacity planners can just 
click on the items they want to include in a model. 
Similarly, gathering performance metrics can also be 
a routine, ongoing activity. 

Pat Moffett is a consulting engineer for capacity 
planning at Norcross, Ga.-based CheckFree Corp., 
which provides electronic bill-paying services and 
software. He pulls performance data from nearly 500 
Linux, Unix and Windows servers, as well as three 
IBM z/OS mainframes, into an IT resource manage- 
ment (ITRM) data warehouse from SAS Institute Inc. 
About 300GB of data is pulled in daily and incorpo- 
rated into daily, weekly and monthly summaries. The 
database also contains business metrics and forecasts. 
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Tee: 


@ Performance trending: Graphing past performance 
and utilization statistics and using these to predict when 
you will need to add more capacity. This can be done 
using one or more variables. 


eeeeeeeoceeea es eeoeeeseeeeeeeeeoe eee 
®@ Load testing: Testing a piece of equipment or a system 
at varying simulated load levels and observing the perfor- 
mance. This is good for identifying potential bottlenecks 
and is often used before deploying equipment. 


@eeeeeeeoceoeeeeeeeeeeeeaeeeeeeeee 
@ Multitier modeling: Using capacity planning tools to 
simultaneously model all the elements of a multitier appli- 
cation and predict the end-user response times. 
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® Multiworkload modeling: A step up from multitier, 
this takes into account the fact that more than one appli- 
cation will be running over a network at a given time. 

Note: More sophisticated methods that allow you to 
model multilayer architectures with several variables are 
more time-consuming, and the tools are more costly, but 
they deliver better results. 


Moffett runs reports directly out of the ITRM and 
does some regression analysis using the SAS statistical 
procedures. But he also uses other tools for forecast- 
ing: For simpler calculations, he imports data into an 
Excel spreadsheet, and he uses modeling software 
from HyPerformix Inc. to simulate server capacity. 

Getting the performance data is the easy part. Get- 
ting the business data takes a bit more skill because it 
involves coaxing data out of business unit executives 
rather than network devices. This includes business 
and service metrics, as well as expansion plans. 

“The process of obtaining the business information 
is the biggest challenge,” says Tom Hill, capacity plan- 
ner at CNF Inc., a Palo Alto, Calif.-based shipping and 
supply chain management company that uses BMC 
Software Inc.’s Patrol on more than 60 servers. “At 
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some point, you are going to have to justify your exis- 
tence, and either you are supporting the business or 
you are not going to be around much longer.” 


Now and Forever 


| Once a data feed is arranged, the next decision is 


what to do with it. That requires an analysis of which 
resources are most important to keep running at 
optimum performance. For the government of Vir- 
ginia’s Fairfax County, the key element is the IBM 
mainframe running its custom financial, human re- 
sources, budgeting, procurement and record-keeping 


| applications. Systems programmer Tom Rose uses 


Perfman for z/OS from The Information Systems 
Manager Inc. in Bethlehem, Pa., to model workloads 


| on the mainframe’s three logical partitions. He is also 


using it to determine which model to purchase to re- 
place the county’s decade-old machine. Rose is con- 
sidering an IBM eServer zSeries 890 mainframe, but 
there are 27 models to pick from, and he doesn’t 
want to get one that’s too big or too small. 

“We are using taxpayer money, so we have to make 
sure we get the right size of machine,” says Rose. 
“One thing we have noticed is that we can purchase a 
machine with more processors, but certain work- 
loads won't be any faster.” 

CenturyTel Inc., a voice and data services provider 
in Monroe, La., with more than 3 million customers 
in 22 states, has hundreds of servers in its data cen- 
ter. But it uses TeamQuest Corp.’s performance man- 
agement capacity planning software on only about 20 
of them. “We have a [Citrix Systems] MetaFrame 
with hundreds of users,” says programmer John Bar- 
foot. “We have so much fail-over in place that if we 
lost a server, it is not a big deal.” 

The servers CenturyTel does model are Unix box- 
es running its data warehouse as well as Amdocs Ltd. 
Ensemble customer service and billing software, SAP 
ERP applications and IBM Tivoli systems manage- 
ment software. Barfoot has used the TeamQuest soft- 
ware to cut the number of servers SAP was running 
on and to model the data warehouse to help the com- 
pany decide whether to replace the server or simply 
upgrade the processors. But the biggest benefit came 


; when CenturyTel was switching from a legacy billing 


system to Ensemble. Hundreds of thousands of cus- 
tomers were being migrated at a time, so Barfoot 
kept a close watch for potential problems. 

“I modeled one of the servers and saw that a very 
significant bottleneck had fallen off the radar,” says 
Barfoot. “We were able to get that corrected the day 
before the conversion, and one director commented 
that TeamQuest paid for itself in that one instance.” 

Cases like this give capacity planning greater cred- 
ibility. No, these tools won’t catch everything. But, 
like weather predictions, they’re getting more accu- 
rate and reliable. Weather.com will give a far better 
prediction of tomorrow’s precipitation than The Old 
Farmer’s Almanac, and capacity-modeling tools give 
a better prediction than linear trending. They won’t 
eliminate the need for keeping an umbrella in the car 
or some overhead in your server CPUs, but they 
greatly lessen the chance of getting caught in an un- 
expected rain or packet flood. @ 56194 


Robb is a Computerworld contributing writer in 
Los Angeles. Contact him at drewrobb@attbi.com. 
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“« the premier event in the 
storage industry ..” 


f Frank Enfanto 
a Vice President, 
Operations Delivery & 


Information Security, 
Blue Cross Blue Shield of 
Massachusetts 
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Learn How to Achieve 
Storage Networking Success 


* Get a Contemporary Overview of Today's Storage Networking Issues and 
Opportunities 


* See How to Implement and Deploy the Latest in Storage Networking 
Technologies 


* Hear the Latest in Enterprise Security 


* Learn from Best Practices and Case Studies 


Why You Should Attend 
aging your company’s data center assets? Want to 
ange innovative ide d strategies with other executives who share the same 
objectives? Then attend Storage Networking World, where you'll network with and 


learn from ren ed exp nd the nation’s top user executives. 


What You'll Learn 
In this executive-forum setting, you'll hear directly from executives and managers in 
Q) ) ¢ 


user companies. They'll address a wide variety of today's burning issues like: 
* Selecting and Deploying Storage * CTO Insights 


Networks ¢ Enterprise Business Applications 
* Data Center and Infrastructure and Databases 


Considerations * Critical and Emerging Technology 


* Storage Security Topics 
* Managing Storage Networking * High Bandwidth Storage 
Solutions Applications 


* Managing Deployments of Existing ¢ Small Medium Business 
and Emerging Technologies Considerations 


¢ Deploying Storage to Meet Industry 
Regulations 


See SNW’s Interoperability & Solutions Demo 

No other storage event gives you: 

* 40-plus SNIA member companies collaborating on 
integrated solutions 


* the opportunity to meet leading experts and engineers 


Storage Analyst Briefing 

oaced session, IDC's top storage analysts 
examine companies’ growing interest in deploying tiered 
storage solutions and assess its impact on storage compo- 


nents, systems, networks, management and services. 


For more information and to register, visit www.snwusa.com/cw or call 1-800-883-9090 





For more information and to register, visit www.snwusa.com/cw or call 1-800-883-9090 
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eta ipdate jt yister visit WWw.snwusa.com/cw 


MONDAY, CSTOsER 24 





9:30am — 11:30an 


1:00r 


7:00pm — 9:00 


TUESDAY, OCTOBER 25 


“« SNW is so concentrated 
that it gives you a good view 
of the overall industry ..” 


Jeff Pelot 
CTO, Denver Health and 
Medical Center 
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Pre-Conference Golf Outing 
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Application for Conference Registration 


Fax this completed application to 1-508-820-8254 or apply online at: www.snwusa.com/cw 


If not indicated on your business card, 


. H please provide the following required 
Your business card is eapeataer 


STORAGE REQUIRED 


Mae 0 Process your application 


Please affix your business card to this space prior to : -883-9090 or ema 
submitting your application. Applications submitted snwreg@computerworld.cor 
without business cards will not be processed. 








Need accommodations? 
October 24-27, 2005 , serve them at: www.etcentral.com 
JW Marriott Questions? Call 1-800-883-9090 a apart 


Or call 1-888-254-1597 
Grande Lakes Resort ren syventhousing@alobalodysseys Y 
Orlando, Florida aoe Da ee tee 
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Attendee Profile: 1 


Your Business/industry Your Job Titie/Function What is your organization's annual IT/IS budget What is the one item that best describes your 
IT MANAGEMENT for all IT/IS products? involvement in the IT purchase process? 


SINESS MANAGEMENT 


Would you like to receive information about playing in 
the golf outing on Monday, October 24th? 
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your entire organization? 
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subscription to Computerworld? 
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Integrator/Consultant 


Cj tam a Channel Partner/ | Q $3,000 General Conference Package O $3, 500 Genera Cont ‘erence Pac kage 
(Complete Attendee Profile above) | 


t-Read 


al al 


CL) My company is Sponsoring/ | OQ $1,290 General Conference Pack 
Exhibiting at SNW | SNiA-produced 1 sar lina cece ag 


C) | am a representative of a Non-Sponsoring IT Vendor Company 
Q $5,000 Business Development Professional Package {or Sales, Marketing and 


2 call 888-23 


) | am a Financial/Equity Analyst and/or Venture cannot Professional 


OQ $1,290 (through September 12, 2005 QO $1,690 (att 
Generel Conference Package General C« 


Card Holder Name 


qnature of Card 
(] | am a qualified member of the press. | can verify my press credentials 
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: . Cancellation Policy (A\\ of the following require writt ificati 
Press should call Customer Service at (800) 883-9090 to register wy ene sits 


In the event of cancellation, the reaistrant has three optior 


Please fax this completed application to 1-508-820-8254 
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TECHNOLOGY 


Protocols 


DEFINITION 


A protocol is a set of formal rules that describe how 
devices or software can exchange information with one 
another across a computer or communications network. 


BY RUSSELL KAY 
N CLASSICAL GREEK, the 
word protocollon (literally, 
“first leaf”) referred to the 
first sheet of paper or 
papyrus in a scroll, which was 
actually glued to the wooden 
scroll itself. By custom, this 
sheet was used to describe the 
contents of the entire scroll. 
When books replaced 
scrolls, the protocollon 
continued as a table 
of contents page glued 
into the front of 
the book. 

For a long time, the 
word protocol was used pri- 
marily to refer to the etiquette 
of diplomacy and formal 
arrangements of affairs of 
state — seating arrangements, 
how to address dignitaries and 
so on. Later, the term became 
a name for a type of treaty or 
international agreement. Per- 


haps the best known of those 
in recent memory are the 


| Montreal and Kyoto protocols, 


sua 


which are environmental 
agreements on greenhouse 
gases and global warming. 

But information technology 
has co-opted the term, as it 
has so many others, giving it 
new meaning in an entirely 
different context. As 
first applied to tech- 
nology in the 1950s, 
protocols were rules 
governing communica- 
tion between electron- 
ic devices such as ra- 
fos and telephones. 

As electronic communica- 
tion grew and computers 
came into widespread use, 
computing protocols were 
created to control the design 
of and interaction among vari- 
ous types of networks. 

IT protocols today describe 


| any set of rules that allow dif- 
ferent machines or pieces of 
software to coordinate with 
one another unambiguously. 
The use of communication 
and computing protocols re- 
quires a common message for- 
mat and an accepted set of 
commands that all parties to a 
communications exchange 
will understand. Thus proto- 
cols ensure that electronic 
communication transactions 
follow predictable, logical 
sequences. 


Ethernet’s Value 


A protocol is an agreed-upon 
set of rules typically used by 
network designers and devel- 
opers to resolve a particular 
communications challenge. A 
protocol must be generally ac- 
cepted as an industry standard 
before it can be widely used. A 





protocol becomes a standard 


| when a standards develop- 

| ment organization or other re- 
| spected group recognizes and 
| codifies it. 


| wiring and signaling 
| for the physical layer 
| as well as data packet 


| gram below). Ethernet speci- 


| fies how it will interact with 





For example, Ethernet is a 
LAN protocol that forms the 
underlying transport vehicle 


| used by several upper-level 
| communication protocols, in- 


cluding TCP/IP. Originally 
developed by Xerox Corp., 
Digital Equipment Corp. and 
Intel Corp., Ethernet has since 
become a formal standard, 
accepted by the Institute of 
Electrical and Electronic Engi- 
neers Inc. as IEEE 802.3. 
A frame-based net- 
working technology, 
Ethernet defines 


formats and protocols 


| for the data link layer 


as described in the In- 
ternational Standards 
Organization’s seven-layer 
Open Systems Interconnec- 
tion reference model (see dia- 


fies how data is broken up into 
discrete packets, how the net- 
work will be accessed and 
how the data is to be transmit- 
ted. The protocol also speci- 


both higher- and lower-level 
protocols. 

Just as standards build upon 
one another, most protocols 
depend on other, related pro- 
tocols to work properly in a 


| broader context. This arrange- 


‘The Internet Protocol Stack 


, 
Mihi wii 
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| ment is often called a hierar- 
| chical protocol stack. 


For example, low-level pro- 
tocols such as Ethernet define 
electrical and physical stan- 
dards, the order in which bits 


| and bytes are interpreted and 


the transmission and error- 
detection/correction systems 


| used in the bit stream. 


Higher-level protocols deal 


| with the way data is format- 

| ted, including the syntax of 
messages, dialogues between 

| terminals and host computers, 


which character sets are used, 
how messages are properly 
sequenced and more. 
The complete proto- 
col stack supports 
applications such as 
Web browsing or 
end-to-end telephone 
calls between voice- 
over-IP telephones. 
Today, the Inter- 
net, the Web and oth- 
er private and public networks 


| simply couldn’t function with- 
| out the existence and accep- 
| tance of scores of specific pro- 


tocols. @ 56406 


Kay is a Computerworld con- 


| tributing writer in Worcester, 
| Mass. You can reach him at 
| russkay@charter.net. 


Are there technologies or issues you'd like 
to learn about in QuickStudy? Send your 


ideas to quickstudy@computerworld.com 


To find a complete archive of our 
QuickStudies, go online to 
@ computerworld.com/quickstudies 


PROTOCOLS 
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TECHNOLOGY 


Peers Say Cisco Ended Up 
Wearing the Black Hat 


After the IOS vulnerability brouhaha, our 
security manager gets a feel for what her 
peers think of the situation. By C.J. Kelly 


VERY YEAR, I dream 

about going to the Black 

Hat USA briefings in 

Las Vegas. I haven’t 
been able to attend yet, but 
Ihave a good friend and col- 
league named Bob who has 
attended on his own dime and 
with his own vacation time the 
past few years. 

After every conference, he 
goes back to work and applies 
his new knowledge to better 
securing the environ- 
ment. Finally, his boss 
saw the value in send- 
ing him, and this year, 
the company paid for 
him to attend the 
event. 

Unfortunately, up- 
per management in a lot of 
companies is still reluctant to 
send security engineers to one 
of the world’s most useful se- 
curity conferences. They need 
to get over that. The feds have 
wised up, and they now recruit 
security people at the confer- 
ence. What does that tell you? 
It tells me that some of the 
brightest and best security 
people hang out at Black Hat. 


Getting the Scoop 


When it comes to Black Hat, I 
live vicariously through Bob. 
He provides me with materials 
from the conference each year 
and shares what he learns. As 
soon as he returned from last 
month’s conference, I pinged 
him via e-mail and asked him 
if his name had been on the 
Wall of Sheep. That’s a giant 
screen in the conference hotel 
that scrolls the names and par- 
tial passwords of attendees 
foolish enough to access the 
Internet through the hotel’s 
unsecured wireless system. 

Of course it wasn’t, because 
he’s a security engineer. 





SECURITY 
MANAGER'S 
JOURNAL & 


——— 


| 





This year’s event was more 
newsworthy than most be- 
cause of the flap that resulted 
when Michael Lynn gave his 
talk about the Cisco IOS vul- 
nerability [QuickLink 55863]. 
Bob sent me the presentation 
materials from Lynn’s talk, and 
I forwarded them to security 
colleagues and asked what 
they thought of the whole 
brouhaha. My take is that Lynn 
lost his job at Internet Secu- 

- rity Systems Inc. 
because Cisco had a 
nervous breakdown 
and ISS didn’t back 
up its guy. What a 
shame. 

One of my col- 
leagues, a Cisco Cer- 
tified Internetwork Expert 
who goes way back, wondered 
why Cisco would get so upset; 
after all, Microsoft gets bat- 
tered for vulnerabilities on a 
daily basis. What he said next 
was superb: “It sounds to me 
like Cisco perceives itself as 
yccupying a firmament above 
and beyond the mortal IT 
world, since theirs is a dedi- 
cated OS and not a flawed, gen- 
eral-purpose OS. I think they 


| need to take a Valium and just 


mellow out!” I was surprised 
at the response, given his top- 
level Cisco certification. 
Another friend, who at one 
time was the director of emer- 
gency preparedness at a major 


Not a single colleague 

| spoke with approved 

of how Cisco handled 
the situation. 





telecom company, had a similar 


| opinion: “This was not Chick- 


en Little; it was a warning — 


| the smoke alarm in advance of 


a fire. ... It was a way to keep 
the bad guys at bay for just a 


| little bit longer.” He also was of 


the opinion that “bad guys will 
always attempt to exploit vul- 
nerabilities. This reminds me 
of the emperor’s new clothes 
— everyone knew there were 
some vulnerabilities with Cis- 
co; they just had an unspoken 
pact not to openly communi- 
cate those vulnerabilities. 
Somebody decided this was an 
issue that demanded attention 
and decided to be responsible.” 

I had thought that someone 
who was responsible for a 
global network would have 
been completely panicked by 
the disclosure. Not so. 


Disclosure Debate 

Bob’s comments about Lynn’s 
choice to disclose the vulnera- 
bility were very interesting. 


| I could see his angst over 


the whole issue of when and 
where it’s appropriate to dis- 
close vulnerabilities that 
could have a global impact. 

“If your security depends 
on secrecy, you've got no secu- 
rity,” he said. “Secrets get 
leaked, or get discovered by 
independent research. If Mike 
Lynn could find it, so could a 
black hat in Pakistan with al- 
Qaeda sympathies. Would that 
person have warned everyone 
equally? Or would they have 
disseminated the information 
differently? Mike Lynn needed 
to disclose what he found, and 
I think he did it properly. 

“T don’t know if Id call 
Michael Lynn a hero,” he con- 
tinued. “He’s certainly gutsy, a 


man of his convictions, willing | 


to make sacrifices to do what 
he feels is right. He’s talented 
in his code analysis. I’d hire 


; him in an instant if I had an 


opening that fit his skills and 
talents. And I’m grateful for 





what he has done. Yes, he 
opened a can of worms, but he 
did it in broad daylight, in 
front of thousands of people, 
rather than in a dark corner 
where only a select few could 
capitalize. 

“It’s a tightrope,” Bob ex- 
plained. “What one researcher 
discovers, another can as well. 


| Criminal hackers are not dum- 


mies; many of them are highly 
skilled and adept at finding 
and exploiting the chinks in 
the armor. There have been 
cases of white-hat researchers 
disclosing vulnerabilities and 
releasing proof-of-concept 
exploit code after getting no 
(or negative) response from a 
vendor, or after waiting for a 
patch to be released for sever- 
al months. I prefer to think 
that these researchers are act- 
ing in the hopes of spurring 
the vendor to act (rather than 
simply grabbing the glory of 
finding the vulnerability). 


| But they are also providing a 


road map to the criminal hack- 
ers, who know that no mitiga- 
tion is available for a particu- 
lar vulnerability. Is this ap- 
propriate? Well, there’s your 
tightrope, and I don’t see a net 
anyplace.” 

Yes, Bob tends to be long- 
winded, and I wish I could 
share all of his comments. But 
it’s striking that not a single 
colleague I spoke with ap- 
proved of how Cisco handled 
the situation. One person sug- 
gested that Cisco should have 
handed out CDs with the IOS 
patch to all attendees at the 
conference. Now, that was a 
great idea! B 


WHAT DO YOU THINK? = 


This week's journal is written by a real 
security manager, “C.J. Kelly,” whose 
name and employer have been disguised 
for obvious reasons. Contact her at 
mscjkelly@yahoo.com, or join the dis- 
cussion in our forum: QuickLink a1590 


To find a complete archive of our 
Security Manager's Journals, go online to 
e computerworid.com/secjournal 
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SECURITY LOG 


Webroot Unveiis 
Spy Sweeper 2.5 


Webroot Software Inc. has 

released a new version of its 
enterprise antispyware soft- 
ware. Spy Sweeper 2.5 in- 


SurfControl Inc. last week an- 
nounced the availability of a 

Web filtering tool designed for 
Citrix Systems Inc.’s Presen- 
tation Server 3.0 and 4.0 en- 


Glendale, Calif.-based Panda 
Software Inc. last week rolled 
out software to help protect 
against hacker break-ins 

via virtual private network 
connections. VPNSecure is 
designed to ensure that re- 
mote computers attempting to 
access a corporate network 
via a VPN comply with pre- 
scribed security policies relat- 
ing to antivirus updates and 
firewalls. Pricing starts at 
$42.31 per seat, with a 25- 
user minimum. 
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Asset Management 
Software Upgraded 


Exor Corp. in Bristol, England, has 
announced the 3.2.1 release of its 
asset management software. The 
release features enhancements 
for enterprisewide consolidation | 
of asset registers and work prac- 
tices, the company said. Version 
3.2.1 offers an interface between 
Exor and the Oracle E-Business 
Suite, as well as the ability to 
model off-network and external 
assets. Pricing was not available. 


SAS Enhances 
Enterprise Miner 


SAS Institute Inc. has announced 
plans to enhance its data- and 
text-mining software. Enterprise 
Miner 5.2 includes new visualiza- 
tion and enhanced Web-mining 
features. Text Miner adds the abil- 
ity to analyze documents in PDF, 
HTML and other formats. Both 
products will ship in October. 


Nexsan Announces 
Storage Appliance 


Nexsan Technologies Inc. has an- 
nounced Assureon, its first secure 
content-addressable storage ap- 
pliance. The device serves as a 
write-once, read-many storage 
system. Based on ATA disk tech- 
nology, the Assureon supports 

up to 168TB of capacity. Pricing 
starts at $12,500 per terabyte. 


WebLogic Gains 
BPEL Support 


BEA Systems Inc. announced that 
BEA WebLogic Integration 8.5 in- 
cludes support for the Business 
Process Execution Language 1.1 
standard. The tool includes en- 
hanced process management and 
data-transformation features de- 
signed to boost performance. 
Users can develop business 
processes in WebLogic Integra- 





tion and export them as BPEL 
processes or import BPEL proc- 
esses developed in other tools. 
WebLogic Integration 8.5 is 
priced at $62,000 per CPU. 


DOUGLAS SCHWEITZER 


The ‘Virtual’ Way to 


"VE ALWAYS FOUND the vernacular used in 


computing very interesting. For example, there’s 


the term virtual. In computing, what is called vir- | 


tual does not physically exist but has been made 


to appear to exist by some software processes. 


My first experience with ; 
this term was in connection 
with the use of virtual mem- 
ory. When an operating sys- 
tem runs out of real (physi- 
cal) memory, it begins to 
swap chunks of data from 
physical memory chips to 
the hard disk in order to 
make room for more data. 

The use of virtual tech- 
nology certainly doesn’t 
stop with memory, however. 

Enter the virtual LAN, or 
VLAN. A VLAN acts like an 
ordinary LAN, but connected devices 
don’t have to be physically connected 
to the same segment. In other words, 
a VLAN appears to be one large net- 
work created from a collection of mul- 
tiple networks. Today, many organiza- 
tions use VLAN technology to create 
expanded LANs comprising hundreds 
of host machines spanning multiple 
geographic locations. Essentially, a 
VLAN allows you to divide your net: 
work into segments, creating multiple 
discrete networks within one physical 
network and allowing traffic to be fil- 
tered between them. Often, an organi- 
zation creates separate VLANs for 
different departments or divisions, 
with each serving as a boundary and 
improving performance by isolating 
certain network traffic. 

While handy for segmenting Ether- 
net networks, VLANs can also be 
used as a security tool for wireless 
networks. Wireless users are at their 
greatest risk when in hot-spot environ- 
ments. For security purposes, VLANs 
are often used to segregate wireless 





traffic from other network 
traffic. Say, for example, 
you'd like to provide wire- 
less connectivity in your 
cafeteria or some publicly 
accessible areas of your 
organization. For general 
Internet access, it would 
be wise to put that wire- 
less network onto an un- 
trusted VLAN that con- 
nects only to the outside 
world and not to your 
internal network. If inter- 
nal network access is re- 
quired, it should still go on a separate 
VLAN yet have its own firewall con- 
nection to the rest of the network. In 


| addition, you can prohibit users from 


joining the VLAN network by restrict- 
ing individual access or any unwanted 
intrusion into a network. 

As you can see, VLANs have the 
ability to provide additional security 
not available in a traditional LAN envi- 
ronment. And while the proper use of 


VLANs alone can improve wireless se- | 


curity, you may still wish to employ 
additional security measures — such 
as a public-key infrastucture — to 
keep sensitive data from prying eyes. 
With all their benefits, VLANs are, 
as you would expect, sometimes more 
costly to implement than traditional 


| LANs. VLANs are essentially WANs 
| and often need to support geographi- 


cally dispersed locations and extra se- 
curity; as a result, they can increase 
overhead. Basically, they’re a little more 
complex to configure than connecting 
computers together in the same build- 





ing like with an ordinary LAN. 


Better Wireless Security 


Configuration of the VLAN may be 
either static or dynamic. For height- 


| ened security, the static configuration 


is the best and therefore most popular 


| option in today’s networks. Static 


VLAN configurations assign member- 


| ship to only one port on the switch 
| rather than to the media access control 


(MAC) address of whatever device is 


| connected to the port. 


Less secure (and less popular) are 


| the dynamic VLANs, where VLAN 


membership is assigned to the MAC 
address of the device or host. In short, 


| when a port that’s configured to sup- 


port a VLAN connects with a host, the 


| switch will determine which VLAN 


that specific MAC address is part of 
and will then assign the appropriate 
VLAN to the host. 

While static configurations are the 


| better option for VLAN security, re- 


member that they nevertheless remain 
inadequate for providing absolute se- 
curity. They do provide a safeguard 


| against offhand attempts at viewing 
|} your network traffic, but VLANs have 
| their own security shortcomings, such 


as VLAN “hopping.” In hopping, net- 


| work security is jeopardized when a 
packet sent from a VLAN is intercept- 


ed or rerouted to another VLAN. 
Experienced hackers can exploit 
these vulnerabilities to sniff data and 
determine passwords and other criti- 
cal data at the Layer 2 switch level 
where VLANs operate. Because 
switches weren’t originally devised to 
perform as firewalls or routers, they’re 
inherently vulnerable to such attacks. 


| Fortunately, the new breed of smart 


switches currently available is helping 
to put an end to this deficiency and 
reinforces the value of VLANs as a 
wireless security strategy. @ 56408 


WANT OUR OPINION? 


For more columns and links to our archives, go to 
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“Computerworld’s approach of using 

real-world testimonies is really the key. If I 
wanted a vendor opinion, I'd call a vendor up ... 
TOM VIM RMN Me mele m-lelel ti @rret la lay 
challenges and when | see my peer talking about 
technology innovation, it has much more weight.” 


Steve Bandrowezak, VP CIO, DHL Express 
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PREMIER 100 SPOTLIGHT 
No Strings Attached 


| 
| 
Rent-A-Center’s flexible, | 
wireless hiring kiosks have 
saved time and money, 
improved hiring and inspired 
further automation, says 

CTO Tony Fuller. Page 36 


WHO'S WHO IN IT 
Fishing in the Data Pool 


Systems and programming 
manager Shawn Mahoney 
tells what it takes to help 
his business customers reel 
in the right information. 





NSTANT MESSAGING has fought 

the battle for business turf and 

won. The use of IM in the corpo- 

rate sector has reached main- 
stream status, and it’s a welcome 
productivity boost. 

“Before IM, we had too many 
salespeople who had to get up and 
go meet face to face because some- 
one couldn’t be reached. And with 
e-mail, you have a latency issue, so 
employees would get up and go talk 
to each other,” says Josh Stallings, 


vice president of strategic initia- 
tives at No Red Tape Mortgage in 
Sherman Oaks, Calif. 

“Now our people are on the 


| phone all day because they can 
| [simultaneously] IM our process- 
| ing team to get the information 


they need for our clients,” he says. 
IM is a real-time text communi- 
cations technology with which 
messages can be sent, received and 
viewed immediately. And it’s nearly 
everywhere, says Paul Ritter, re- 


08.29.05 


BOOK REVIEWS. 
The World Is Flat 


Thomas Hoffman looks at Pulitzer 
Prize-winning columnist Thomas 
Friedman’s latest effort, as well as 
books on how to get the most out of 
your team and how to handle tough 


questions. Page 40 


Before you embrace instant 
messaging, be sure to address 
eal Ce 
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search director for messaging and col- 
laboration at Wainhouse Research, a 
communications market research firm 
in Duxbury, Mass. “Our research 
shows that more than 80% of large 
companies in the U.S. have some form 
of IM,” he says. 

But IM is risky and could cause as 
much damage as rogue e-mail, says SV. 
Purushothaman, program leader of the 
conferencing and collaboration group 
at Frost & Sullivan Ltd., a high-tech 
consultancy in New York. “Today, 10% 
of global IM messages are spim,” or IM 
spam, says Purushothaman. “It has the 
same potential as e-mail spam.” 

Moreover, hackers are finding it 
easier to break in through IM buddy 
lists than by other means, he says. 

While some companies have out- 
lawed IM because of security concerns 
[QuickLink 56025], many are looking 
for ways to mitigate risks while enjoy- 
ing the business benefits. Here are 
steps you can take to secure IM in your 
organization. 


MANAGE UNAUTHORIZED IM 
CLIENTS. This applies to anything 
that’s added to IT assets and infra- 
structure, says David MacLeod, direc- 
tor of information protection and 
assurance at The Regence Group, a 
health insurance carrier in Portland, 
Ore. “We have a very well-defined, 
-controlled and -monitored electronic 
perimeter,” he says. “We know what 
can leave our organization and what 
can come in. That is clearly the first 
and most important step when you 
want to introduce anything new onto 
the network.” 


ADDRESS RISKS THAT ARISE 
FROM CHANGE. Simply adding 
IM to the network, like adding any 
software, introduces risk. “It’s not be- 
cause it happens to be IM. Anytime 
we add something new to our environ- 
ment, there are security and privacy 
considerations,” says MacLeod. “You 
need to determine whether it has 
altered the security posture of the 
organization.” 


IDENTIFY AND VERIFY USERS 
TO CURTAIL UNAUTHORIZED 
ACCESS. This is what’s referred to 
as authenticating the user. CIO Tim 
Hudson at Man Financial, the broker- 
age arm of London-based Man Group 
PLC, accomplishes this by tying the 
party’s identity and permissions for 
various types of uses to existing tech- 
nologies that identify people who have 
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| access rights on the network. “If some- 


one has logged onto IM, we know that 
she or he is that person,” says Hudson. 


ESTABLISH APPROPRIATE- 
USE POLICIES. “If you have an IM 
product you want to use, you need to 
do due diligence and have proper poli- 
cies in place,” says Frost & Sullivan’s 
Purushothaman. Policies may include 
rules such as not allowing users to 
send files via IM, because sending and 
receiving attachments makes it easy to 
spread viruses, he says. 

Or you may not want different 
workgroups to IM one another. “We 
have separate user groups and don’t 
necessarily allow them to IM each oth- 
er. This ensures that research, sales, 
and institutional and product client 
groups are appropriately connected or 
disconnected,” says Hudson. The same 
technologies that identify users can 
identify the workgroups they belong 
to with their individual IM privileges, 
he says. 


EDUCATE EMPLOYEES ABOUT 
IM USE AND POLICIES. Employ- 
ees play an important role in IM secu- 
rity. “Educate your users that they 
shouldn’t be sharing passwords and 
that if they are, they’re handing over 
their identity to their colleague,” says 
Hudson. 

At The Regence Group, people man- 
agement is key to securing IM. “We 
have clearly articulated our policies 
around what kinds of information 
should be shared, what kinds should be 
protected and what are appropriate 
mechanisms for sharing information,” 
says MacLeod. 


ENFORCE POLICIES. “We have 
tools that automatically apprise us 
when it appears that something against 
policy has occurred,”says MacLeod. 
“We work with human resources and 
our leadership team to make sure that 
the employees involved understand 
why that’s not appropriate and to 
coach them on how to do that kind of 
information exchange in a more secure 
and appropriate manner.” 

Purushothaman takes a harder line 
against IM misuse. He suggests issuing 
one or two warnings and then proba- 
tion for offending employees. 


MONITOR RISKS RELATED TO 
SECURITY AND PRIVACY LEG- 
ISLATION. Many companies using 
IM are subject to multiple privacy and 
security regulations, such as the Health 





Insurance Portability and Accountabil- 
ity Act and the Sarbanes-Oxley Act. 

The compliance concern is that 
information that should be secured can 
be passed on quickly and easily to nu- 
merous parties in the public domain, 
CIOs say. 

Therefore, in industries such as fi- 
nancial services, pharmaceuticals and 
health care, IM conversations must be 
archived and logged. There also need 
to be policies to prevent any damaging 


| information from getting out, says 


Purushothaman. 


MANAGE IM PATCHES. Take the 
same care with IM patches that you do 
with any other software. “We evaluate 
all IM patches to determine if they ad- 
dress something that is at risk for our 
organization, and if they do, they are 
prioritized and applied as quickly as 
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appropriate,” says MacLeod. 


IF YOU SEND INSTANT MES- 
SAGES OUTSIDE THE COM- 
PANY, RECOGNIZE THE 
UNIQUE RISKS ASSOCIATED 
WITH THAT. “If a CIO believes she 
or he needs to IM outside the compa- 
ny, that introduces an entirely different 
set of concerns,” MacLeod says. “You 
require a different set of controls, and 
it should be segregated from the inter- 
nal messaging capabilities.” 

Additional authentication measures 
might be necessary to adequately iden- 
tify who is sending instant messages 
from outside the company, Hudson 
adds. @ 56144 





Geer is a freelance writer in 
Ashtabula, Ohio. Contact him 
at geercom@alltel.net. 


MANAGED PUBLIC INSTANT MESSAGING, 
which uses gateways to and from public 
systems, lets companies communicate be- 
yond their walls to a vast world of cus- 
tomers, partners and contacts using what- 
ever IM software they want. 

The benefits of being able to reach 
everyone instantly are pushing companies 
to find secure managed public IM products 
and driving vendors to provide them, says 
SV. Purushothaman, 
program leader of 
the conferencing 
and collaboration 
group at Frost & 

Sullivan. 

IM vendors such 
as Microsoft Corp. 
and IBM, which sell 
server software to 
companies that 
want to run their 
own IM systems, 
are striking deals 
with public net- 
works like Ameri- 
can Online Inc.’s IM 
network, says Paul 
Ritter, research di- 
rector for messaging and 
collaboration at Wainhouse Research. At 
the same time, managed public IM ven- 
dors, including IMLogic Inc., FaceTime 
Communications Inc. and Akonix Systems 
Inc., are selling gateways designed to se- 
curely regulate traffic between public and 
internal IM networks, Purushothaman says. 

The managed public IM vendors are also 
developing environments called federated 


clearinghouses that enable users with 
public IM user IDs to send and receive in- 
stant messages securely, he adds. 

These clearinghouses mitigate the risks 
of intercompany IM because they don't in- 
clude the millions of users on public IM, Pu- 
rushothaman explains. “You might have ac- 
cess by invitation,” he says. “If you are a 
preferred partner, for example, a company 
could choose to provide you access to its 

internal IM network. 
The access won't 
be provided to the 
entire workforce of 
the partner. It could 
be limited to 10 to 
20 users.” 
At No Red Tape 
Mortgage, busi- 
ness-class IM is 
provided on a se- 
cure, external net- 
work, says Josh 
Stallings, vice presi- 
dent of strategic ini- 
tiatives. 
The company 
selected an external 
IM service to segre- 
gate IM from the compa- 
ny network. “We chose this model to re- 
move IM from a position of access to 
other applications on our network,” says 
Stallings. This isolates IM from the compa- 
ny’s internal applications and network for 
security reasons. It also keeps IM from 
using up the bandwidth reserved for those 
other applications, Stallings says. 
- David Geer 
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Rent-A-Center’s 
wireless hiring 
kiosks are a 
model of effi- 
cient in-store 
automation and 
a catalyst for 
more. By Gar) 
H. Anthes 
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F A SINGLE WORD could sum 
up the system development 
approach at Rent-A-Center 
Inc., it would have to be flexi- 
bility. Flexibility in project 
management. Flexibility in 
technical architecture. Flexi- 
bility in application design. 

Those three ingredients came to- 
gether recently when the $2.3 billion, 
Plano, Texas-based chain of merchan- 
dise rental stores overhauled its hu- 
man resources system and put wireless 
hiring kiosks and thin clients into 
nearly 3,000 sites across the U.S., 
Canada and Puerto Rico. 

The system, which process- 
es 10,000 applications and 
1,000 new hires a month, cost 
$3.9 million and is saving Rent- 
A-Center $2.3 million a year, 
the company says. It also has 
freed store managers from 
hours of paperwork each 
week, boosted the quality of 
new hires while decreasing 
employee turnover and laid 
the foundation for further in- 
store automation. “This has been a 
huge success for the company,” says 
Tony Fuller, IT vice president and 
chief technology officer and a 2005 
Computerworld Premier 100 IT Leader. 

Before 2004, a job applicant walking 
into a Rent-A-Center store had to fill 
out a paper application, and the store 
manager would hold it until he had an 
opening. Neither the home-office HR 
department nor a nearby store with an 
immediate opening would know any- 
thing about the candidate. Moreover, 


Str 
Attached 


| the store manager was forced to be- 
come a part-time HR specialist, some- 
thing he may have had neither the time 
| nor the temperament for. 

Now, that same applicant sits down at 
an in-store kiosk, reads about Rent-A- 


| Center on the company’s Web site and 


then fills out a job application online. 
The completed application is transmit- 
ted wirelessly to the store’s network and 
from there to corporate HR via the 
company’s virtual private network. 
The application is processed and 
screened by recruiting specialists using 
the Webhire Recruiter hosted service 





Boece.) 
huge success” for 
Rent-A-Center, says 


from Webhire Inc. in Lexington, Mass. 

When a store manager no- 
tifies the home office of an 
opening, within 24 to 48 
hours he’ll get the résumés of 
at least five prequalified ap- 
plicants to choose from, ac- 
cording to Jennifer Wisdom, 
HR vice president. “A senior 
VP estimated for me that his 
({regional] market managers 
were spending 20% to 25% of 
their time in recruiting,” she 
says, “and now it’s about 5%.” 

Tammy Walker, who manages a 
| Rent-A-Center store in Orange City, 
Fla., agrees. “We are getting better 
people now, and it has reduced our 
turnover,” she says. 

Walker says every applicant, quali- 
fied or not, used to cost her two hours 
of paperwork. Now the paper is gone 
and most of that labor takes place in 
the corporate HR department. 

Rent-A-Center stores change their 
merchandise and floor layouts continu- 
ally, says K.C. Condit, director of tech- 
nical infrastructure, and that’s one rea- 
son the company insisted on wireless 
kiosks. The little cubicles — which are 
fitted with a diskless, book-size thin 
client, a display, a mouse, a keyboard 
and a chair — can be moved easily, and 
the company saves the cost of wiring 
and rewiring 3,000 stores. 

“This was a lead-in to more things 
down the road,” Fuller says of the proj- 
ect. “The kiosks were the catalyst that 
allowed us to do the infrastructure, 
and we have piggybacked a lot of 
things onto that.” 

With the network infrastructure in 
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place and the thin-client and wireless 
technologies proven, Rent-A-Center 
ordered 9,000 more wireless-enabled 
thin clients to support additional in- 
store applications. Account manage- 
ment, which had been a laborious, 
paper-based function, has been auto- 
mated, and a training program based 
on books and videotapes was turned 
into a Web-based program managed by 
the home office. Store personnel can 
use the thin clients for e-mail and ac- 
cess to the company intranet as well. 

And each store can serve as a “virtu- 
al office” for regional mangers, who 
are on the road visiting stores four 
days a week, Fuller says. “Now that we 
have proved that wireless works in the 
stores, we can deploy things on de- 
mand fairly quickly,” he says. 

Adds Condit, “We program the de- 
vice, ship it to the store, and all they 
have to do is plug it in and turn it on — 
from out of the box to on the network 
in 10 minutes, without having to call 
tech support.” 56146 
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What's the most important contribution you 
make, and how do you make it? We have 
two responsibilities here, data ware- 
housing and back-end reporting — 
business and management reporting. 
We manage and define data for report- 
ing. That’s incredibly important to the 
organization. We work very diligently 
to provide meaningful reporting for 
the business. That includes regulatory 
reporting. We support finance, claims 
and certain areas of product, actuary 
and underwriting. Most of the business 
looks to us for special reports. 


What is the most important IT skill or apti- 
tude you need to do your job? If you want 
to be successful in IT, you can’t be just 
a specialist anymore. You have to have 
a blend of skills to be effective. You 
need a little programming background, 
but as a manager, I can’t be just the 
fastest coder; I try not to code. But I 
need to understand the effort it takes 
to get useful information out of the box. 
I also need a strong familiarity with 
the data and why and how the business 
uses the data and how it’s defined. 


What is the most important “soft” skill you 
need to do your job? I have 10 direct re- 
ports, and I have to have really good 
people skills to harness their energies, 
get them focused on a particular agen- 
da, lead them through tough times and 
get quality information out the door. If 
I were not a people-oriented person, I 
don’t think I could be very successful. 
Communication plays an important role 
here. We spend an awful lot of time 
bridging the communications gap be- 
tween business people, who have their 
own acronyms and language, and the 
hard-core applications-development 
side of the business, which is a differ- 
ent area. When the business has needs, 
we listen intently and restate them in 
tech terms for the tech counterparts. 
Everyone has to be in tune so that 
transfer can take place. 


What's the biggest misconception about 
what you do? I think the time it takes to 
do things is the biggest misconception. 





"Data 


Shawn Mahoney guides business 
customers tothe rightinformation 
and helps them reelitin. 


Business people understand that what 
we do is difficult, but they say, “It’s sort 
of like this other job.” They don’t real- 
ize that once you get down under it, 
the required changes take more time 
than they thought. We want to turn 
things around quickly, but there’s a 
level of due diligence. We want to be 
sure we've understood correctly. 
Everybody’s grappling to shrink the 
time to develop a report, but the level 
and complexity of reporting in today’s 


| environment has only gotten more 


complicated. 


What do you like best about your job? I have 
a great team. If I didn’t, it would be 
very frustrating. And I have very sup- 
portive management. I’ve been allowed 
to take this role and develop it and 
work with a diverse group and make it 
all work. It’s fun. If I couldn’t get up in 





Fishing 


Pool 


the morning and know I’m going to 
have fun, I wouldn’t want to be here. 


What do you like least? The volume of 
regulatory work we have to comply 


| with. It just seems to grow. This is a 


highly regulated industry, and some of 
it gets to be so — you just wonder why 
they’re asking the question. I don’t 
mind doing this, but I would like to 
know why, other than that the state 
decided to report this way. 


What should other IT people know about 
your role? That it’s fun to be a manager. 
You don’t always see a lot of people 
striving to take on management roles 


| in IT, but it can be fun to be a manager, 


as long as you find ways to cut that 
work umbilical cord at the end of the 
day. There’s a sense of satisfaction that 
you get. Even when things go wrong, 
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when you come up with a solution, you 
derive a lot of satisfaction from that. 


| It’s a challenge, and it’s rewarding. 


What should business people know about 
your role? That for this to be a success- 
ful partnership, they need to invest a 
lot of quality time and not just turn 
something over to IT. It takes commit- 
ment from both parties to be success- 
ful. You need a business partner 
[who’s] not only willing to help you 
build a requirements document but 
also to take the time to educate the 
team as to why they need this done so 
everybody buys into the game. There’s 
a better result when everybody under- 
stands. We lose that if we’re just 
programming out of a set of specs and 
have no clue why they want informa- 
tion in that format. We need the busi- 
ness people to be here throughout the 


| whole process. More and more, we see 
| people willing to do that, but there are 
| still a few we need to convert. 


What would enable you to do your job 


better? More resources are always nice. 


| Bigger, faster, more people is certainly 
| important. All of IT has gone through a 


real austerity program in the last few 
years. As businesses look at what they 
need to do to be competent in this in- 
creasingly global marketplace, they 
have to think where to put their invest- 
ments. Organizations have a lot of in- 


| formation, and you can do a lot to the 


data that makes it easy to ask questions 
and learn something about the busi- 
ness. That takes time, talent and in- 


| vestment, but it pays dividends. 


If you weren’t a systems and programming 
manager, what would you be? My dream 
job would be fishing guide, but it prob- 
ably doesn’t pay very well. Helping 
people get at something by putting 
them in touch with the right resources 
and the right body of water — catching 
fish and catching data aren’t all that 
different. 


| How does the future look for your role? I’m 


| pretty positive and excited about it. 


Because through back-end reporting 
and data warehousing, we’re really tied 


| to the business from an information 
| perspective. It’s the information side of 
| information technology that’s impor- 


tant. Technology is going to change, 
and that’s exciting, but you really need 
to remember the core is having knowl- 
edge about the data and keeping it 
where you can get at it and use it. 


@ 56148 
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The World Is Flat: A Brief History of the 

Twenty-first Century, 
(Farrar, Straus & Giroux, 488 pages, 
$27.50). 
UCH HAS BEEN written and 
said about the latest book 
from the Pulitzer Prize- 
winner and New York 
Times toreign affairs columnist 
Thomas Friedman. Clayton Jones of 
The Christian Science Monitor called 
it “an idiot’s guide to surviving in the 
computer age,” while Warren Bass de- 
scribed it as “an enthralling read” in 
his review for The Washington Post. 
I'd say the book falls somewhere in be- 
tween. To Friedman’s credit, it’s the 
most comprehensive description I’ve 
seen of how the events of the late 20th 
century and the first few years of the 
new millennium have helped “flatten” 
our world. 

Friedman’s premise is simple: The 
massive investment made in fiber- 
optic technologies during the heyday 
of the dot-com era has made it possible 
for companies from Shenzen, China, to 


: “pitals can transmit CT scans via 
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Sofia, Bulgaria, to compete in what has 
truly become a global economy, thus 
leading to a “flatter” world. 
He supports this thesis by listing 
10 forces that have helped flatten the 
world, including the collapse of the 
Berlin Wall, India’s shift away from an 
insular economy, the spread of PCs 
and Windows software, and the open- 
source software movement. 
Some of what Friedman de- 
tails is old news: how U.S. hos- 


the Internet and have them read 
by Indian or Australian radiolo- 
gists overnight, and how sprawl- 
ing call centers in India operate around 
the clock to support customers of big 
companies such as Delta Air Lines Inc. 
and Microsoft Corp. 

Friedman argues that the world is 
now entering what he refers to as 
“Globalization 3.0.” Globalization 1.0 
occurred from 1492 to 1800, after 
Columbus’ discovery of the New 
World helped reveal that the world 
could be circumnavigated, thus un- 


leashing the potential for global trade. 


Globalization 2.0 occurred from 1800 
to roughly 2000, when multinational 
companies ventured overseas for new 
sources of labor and trade. That era 
was driven by the Industrial Revolu- 
tion and resulting technological break- 
throughs such as steamships, trains, 
automobiles, airplanes and telephones. 

Now we're in a third phase of global- 
ization, says Friedman, when software 
and fiber-optic technologies have 
made it possible for people to conduct 
business around the world. And while 
the first two eras of globalization were 
led by Westerners, this latest period is 
open “to every color of the human 
rainbow,” writes Friedman. 

But the flattening of the world isn’t 
just about offshore outsourcing, Fried- 
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man notes. For instance, he points to a 
McDonald’s restaurant in Cape Girar- 
deau, Mo., whose drive-through order- 
taker is located 900 miles away in a 
Colorado Springs call center. The 
order-taker is connected to the cus- 
tomers and the workers preparing the 
food via high-speed communications 
lines. The approach has helped the 
franchisee lower its costs, speed cus- 
tomers through and make fewer mis- 
takes in handling orders. 

At times, Friedman comes off as a 
cheerleader for the flattened world. 
Nevertheless, the book is compelling. 


The Rules of Management: A Definitive 

Code for Managerial Success, 
(Prentice Hall, 209 pages, $16.95). 
OT EVERYONE enters the 
workforce hoping to one day 
become a manager. But if 
you're a creative application 
developer, an effective project leader 
or a skilled network technician, you’re 
likely to find yourself in that role at 
some point. Suddenly, you’re thrust 
into the position of coaxing the most 
you can out of other people, acting as a 
buffer between senior management 
and your staff, setting a good 
example and making sure the 
job gets done right. 

Unfortunately, you’re unlike- 
ly to receive much guidance 
from your boss or a human re- 
sources manager on how to lead a 
team of people you didn’t pick. 

The book’s title is an apt description 
of its contents: It’s a list of 100 rules 
(for example, “Don’t bad-mouth your 
boss,” “Fight for your team”), each fol- 
lowed by a page or two of explanation 
about how to carry out that rule. Al- 
though it’s tough to provide much 
depth on how to inspire loyalty from 
your troops in just two pages, this step- 


a 
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by-step template is a useful guide for 
new managers and a handy reference 
for seasoned bosses as well. 


In the Line of Fire: How to Handle Tough 


| Questions . . . When It Counts, 


(Prentice Hall, 185 pages, $24.95). 
N THE SURFACE, this may 
not seem like the typical IT 
management book. But as 
IT executives’ roles have 
evolved, many have been thrust into 


| public speaking, frequently needing to 


make presentations to intimidating 
boards of directors or hundreds of at- 
tendees at industry conferences. 
While a good presentation can leave 
your audience nodding in agreement, 
an imminent threat lurks beyond the 


—— 


final PowerPoint slide: the Q&A ses- 
sion. This book, written by an ac- 
claimed presentations coach who has 
worked with executives at hundreds of 
companies, including Yahoo Inc., Intel 
Corp. and Cisco Systems Inc., is aimed 
at helping speakers handle tough ques- 
tions with aplomb. 

A quick read at 185 pages, In the Line 
of Fire is nonetheless packed with 
practical advice and real-world exam- 
ples. For instance, it dissects the mis- 
takes incumbent George HW. Bush 
made when he bungled a question on 
the national debt during a “town hall” 
presidential debate with Bill Clinton. 

The premise of the book is that suc- 
cess centers on taking control of ques- 
tions by various means, such as para- 
phrasing them to your advantage and 
Managing the answer with confidence. 
Weissman’s advice is useful for anyone 
who has had to field a tough question 
from a huge audience, a small group of 
staffers or a hostile executive. @ 56096 
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Playboy Appoints 
Senior VP, CiO 


Playboy Enterprises Inc. in Chica- 
go announced the appointment 
of MARK LAUDENSLAGER as se- 
nior vice president and CIO. Lau- 
denslager comes from Walt Dis- 
ney Internet Group, where he 
was vice president of technical 
operations. Previously, he was 
vice president of operations at 
ServerVault Corp. and head of 
e-business infrastructure at 
Capital One Financial Corp. 


Allconnect Picks 
Singer as ClO 


Aliconnect Inc., a provider of 
home relocation services in 
Atlanta, has chosen NEIL J. 
SINGER as executive vice presi- 
dent and CIO. Singer comes to 
Allconnect from LandAmerica 
Financial Group Inc., where he 
was senior vice president of 
e-strategy and president of 

the company’s mortgage pro- 
cessing venture. Previously, he 
was chief technology officer at 
HomeBytes.com Inc. and CIO at 
GE Capital Consumer Financial 
Services. 


Private Healthcare 
Taps Jackson 


Private Healthcare Systems in 
Waltham, Mass., announced the 
promotion of FRANK JACKSON 
to ClO. Jackson joined PHCS in 
March as vice president of appii- 
cations delivery. Before that, he 
was CTO at Biue Cross and Blue 
Shield of North Carolina and ClO 
at Kaiser Permanente of North 
Carolina. 


Northrop Names 
Lofton Sector CiO 


Northrop Grumman Corp. has 
named ART LOFTON vice presi- 
dent and CIO of the company’s 
integrated Systems sector in El 
Segundo, Calif. Lofton most re- 
cently served as deputy manager 
of the long-range strike program 
for Integrated Systems. 
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(Good Numbers 
And Bad 


OR THE PAST 22 YEARS, I’ve worked with 
computers. The basic concept of electronic 
computers is binary numbers: a 1 and a 0, the 
presence of something like voltage or its ab- 
sence. The advantage of computers and math 
is the same. Both are either right or wrong. In my first 
full year as a computer programmer, this was vividly 


proved to me. 


The Lotus 1-2-3 spread- 
sheet application had just 
come out, and my insur- 
ance branch employer had 
me use it to create our in- 
surance agencies’ profit/ 
loss statements. They gave 
me the raw information 
and the previous paper- 
based calculation. I real- 
ized that this calculation 
wasn’t mathematically cor- 
rect, and I informed the top 
boss. He assured me that it 
was right but admitted there was a 
longer, more accurate calculation. 

I did a proof that showed that 

the two calculations weren't related 
to each other. Still, he still ordered me 
to use the quicker calculation, which 
I did. 

My bosses evaluated the results and 
severed one agency’s contract. Then I 
redid the report using the more accu- 
rate calculation. It was now very obvi- 
ous that the simple calculation unfair- 
ly weighted sales growth at the ex- 
pense of profit. They had kept the 
company that had increased sales but 
was unprofitable and fired the compa- 
ny that had steady but profitable sales. 

I have seen executives look at num- 
bers they don’t understand and simply 
accept them as valid because some ex- 
pert said they were. I have heard of 
people using bad calculations to mea- 
sure performance and driving their 
companies into the ground. 





The sad part is that the 
right calculations don’t 
take very much time to dis- 
cover. Here are two truths 
that will help you get qual- 
ity numbers. 

A valid measurement starts 
with properly describing reality. 
People get confused when 
trying to determine how to 
describe customer desires, 
employee happiness or 
production defects. Don’t 
let the complex jargon of 

quality programs throw you off; basic 


math is all you need for any measure- 
| ment, as long as it’s sound math. 


But before you calculate, realize that 
when you manage to a number, it’s a 
means of leading people to a goal. De- 
termine what you want to change and 


| state the goal you're trying to reach 


in simple terms so you can see if the 
numbers lead to that goal. 

Then remember the goal. If you’re 
trying to improve customer satisfac- 
tion, for example, you can use surveys 


| that determine the product features 


and services that make your cus- 
tomers happy. Remember, though, that 
a survey that measures complaints 
doesn’t measure customer happiness; 
it measures complaints. 

A common bad measurement is ra- 
tios in which the two numbers have no 
bearing on each other. The top num- 
ber (numerator) must accurately 
describe part of the lower number 





(denominator). If there is no relation- 
ship, the numbers make no sense. 

For example, management wants 
to know if help desk calls increase 
because of company growth or proc- 
ess problems. Help desk calls are a 
subset of employee access to comput- 
ers. The more systems an employee 
accesses, or the more employees who 
have access, the higher number of 
calls because of the greater chance 
of defects. 

But I’ve seen management try to 
equate help desk growth with growth 
in the number of servers. Server count 
has no direct bearing on help desk 
tickets. If I consolidate five servers 
into one, does that mean my help desk 
tickets will automatically decrease? 
Of course not. 

The easiest measurement may not be the 
best measurement. Remember my earlier 
example about the easy calculation? It 
was simple for people to do, so they 
preferred it. But it led away from in- 
creasing profits. 

Another favorite of mine is comput- 
er uptime. It’s easy to calculate and 
usually looks good. My machine is 
down an average of only five minutes 
a month. Wow, it’s up 99.988% of the 
time. But out of the 168 hours in a 
week that the machine is running, I 


| may want to use it for only 50 hours. 


The fact that it was running for the 
other 118 hours is meaningless to me. 
Employees are led by the numbers 
you manage to. If the scores don’t 
measure progress toward real goals, 
they’ll drive your company right off 
a cliff. If you don’t know whether a 
number is good, challenge it. If you 
know it’s bad, fix it. 
Don’t settle for easy to calculate. Be- 
ing out of business is easy to calculate. 
It’s zero. @ 56097 
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“your program is the absolute best, bar 
none.! am shocked at how quickly | learn.” 
Michael Murphy - Texas, USA 


“Stupendous...the juxtaposition of text, 
sound and picture was masterful. The 
quality of both sound and graphics 
was first rate.” The Boston Globe 
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DolphinSearch, Inc., 

in Ventura, CA, seeks a Soft- 
ware Engineer. The position 
requires a Masters degree in 
Computer Science or equiv- 
alent and 1 year experience 
in systems analysis, infor- 
mation retrieval and com- 
plex problem solving. Fax 
resumes to Tina Killion, HR 
Manager at 805-648-7150 or 
mail resumes to Dolphin- 
Search, Inc., 5855 Olivas 
Park Drive, Ventura, CA, 
93003, Attn: Tina Killion 


Senior Manager, Net- 
work Engineering, to ov- 
ersee corporate network 
& server infrastructure. 
Requires MS in Comp 
Eng or Comp Sci or equi- 
valent & relevant experi- 
ence. Send resume to 
CancerVax Corp. 2110 
Rutherford Rd Carlsbad, 
CA 92008 or email to 


jobs@cancervax.com. 


Software Architect wanted by 
Insurance Data Processing (IDP, 
located in Wyncote, PA) to cus- 
tomize software for the insur- 
ance industry in the property 
and casualty segment. Candid- 
ates must have MS or BS+5year 
experience in iT field. Please 
apply at resumes@idpnet.com 
EOE 

Synova has multiple openings 
for Project/Software Engineers. 
System Analysts, DBA. Our cli- 
ents include Fortune 500. Candi- 
dates must have MS or BS with 
experience. We offer attractive 
wage with full benefits. Travel 
maybe required. Email resume 
to ads@synovainc.com. EOE 
No calls. 


Programmer-Analyst needed at 
unanticipated client sites to 
dsgn ETL architecture for pro- 
jects, dvip the s/ware dsgn doc- 
uments per the SRS provided to 
ETL using Ab Inito, describe 
ETL flow in the SDD; create 
high-level dsgn documents us- 
ing Visio; dvip ETL graphs; con- 
duct unit testing; dvip scripts: 
migrate code in FAT envrmt; 
support impimtn; provide rotat- 
ing 30-day support coverage & 
provide end-user training & doc- 
umentation. Resume to: CS 
Solutions, 2626 E. 82nd St 
#151, Bloomington, MN 55425. 


Automation/Programmer Ana- 
lyst at engineering firm needed 
to automate all working proces- 
ses using commercial business 
practices, SQL and ASP to tie- 
in these systems together to 
create an “Only-Once” relation 
al system that will encompass 
Human Resources, Account- 
ing, Petrochemical Engineering 
Projects, Information Technolo- 
gies and Purchasing and Pro- 
curement. Coordinate and hold 
training sessions for all pro- 
grams created to accomplish 
these tasks. Send resumes to: 
Bandini Enterprises, Inc. in 
Pasadena, TX at: alseicer@ 
bei-us.com. Put job code AS 
on resume 
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Computer Systems Hardware 
Analyst (Augusta, GA). Job Dut- 
ies: Developing and implement 
ing enhancements to existing 
applications, porting applica- 
tions to new technology, con- 
verting custom applications to 
package capabilities, and assist- 
ing in keeping current applica- 
tions operating at peak efficien- 
cy; modifying applications in a 
variety of operating system envi- 
ronments, as well as responsibil- 
ity for implementing data ware- 
housing techniques, including 
Kimball and Inman; data mining 
and extraction; analysis of user 
needs and development of soft- 
ware solutions. Analyze and 
design databases within an 
application area, working indi- 
vidually or coordinating data- 
base development as part of a 
team. Minimum skills: B.S. in 
Information Systems, Mathema- 
tics/Statistics, Software Engin- 
eering, or other technical field 
Must have four years of prior IT 
experience with applications 
development in an industrial or 
manufacturing context including 
at least two years EAI Architec- 
ture experience with WebMeth- 
ods 6.0 or 6.1. TO APPLY FOR 
THIS JOB YOU MUST MEET 
ALL THE ABOVE REQUIRE- 
MENTS. Send resume to Donna 
Edwards; Electrolux Home Pro- 
ducts, Inc., P.O. Box 35920 
Cleveland, OH 44135 or fax to: 
(216) 898-2340 


Computer Software Engineer 
- Applications 


Must design, develop, maintain 
modify, write, test, document 
and implement computer appli- 
cations software for a variety of 
PC and server platforms. Ana- 
lyze user's needs and develop 
software applications. Identify 
and implement new technolo- 
gies for multiple lines of busi- 
ness with telephony, multimedia 
and internet deployments using 
a variety of protocols. Must pro- 
vide support to multiple remote 
locations in and out of normal. 
business hours. Travel required 
Must be proficient in Java, C# 
and C++ to develop real time 
applications that execute under 
Windows 98/XP PCs utilizing 
SQL server and other data buse 
management systems, IIS and 
Apache TomCat webservers. 
HTML, Microsoft Studio.Net, Cy- 
base MSSQL, MySQL, ASP.Net 
understanding of wireless, inter- 
net capable protocols; strong 
understanding of audio CoDecs. 
video CoDecs and SIP program- 
ming. Bachelor of Science De- 
gree in Engineering (Computer 
and information Science) or 
equivalent degree, plus three 
years experience. 40 hours per 
week. Must have authorization 
to work in the United States. 
Employer is located in Aurora 
Nebraska, a city with a popula- 
tion of 4,000. Send resume to 
Nedelco, Inc., 1001 12th Street 
Aurora, Nebraska 68818 


Software Project Manager w. 
Masters in Comp Sci or Engg or 
Math & tyr exp to plan, organize 
& coord S/W dvipmt projects. 
Gather systms reqmts from 
users & translate then to UML 
diagrams. Dsgn & dev large web 
applic. using industry standard 
OOAA&D techniques, SDLC prin- 
ciples & s/ware dsgn patterns 
Analyze, dsgn & dev web applic 
using J2EE, Java, Websphere. 
VB, ASP, IBM, DB2, MS SQL 
Server, MS Project & JSP on 
Windows platform. Supv. 2 
Prgmrs. Exp prior to compietion 
of Masters Degree is accept- 
able. Mail resume to: Soft Tech 
Source, A Div. of Ramesh Sarva 
‘CPA, P.C., 109-17 72nd Rd, Ste 
#6-R, Forest Hills, NY 11375. 
Job loc: Forest Hills, NY or in 
any unanticipated locations in 
USA 


SENIOR BUSINESS 
SYSTEMS ANALYST 


Hicksville, New York. Work clos- 
ely with business units to gather 
systems development require- 
ments and lead resulting pro- 
jects; develop project plans 
track and report project status to 
management and ensure quality 
delivery of IT services; serve as 
liaison between designated bus- 
iness units and the IT depart- 
ment; prepare ad-hoc and stan- 
dard reports for management 
meet with business unit man- 
agement on a regular basis to 
determine opportunities to im- 
prove current processes through 
changes to current systems or 
by implementing new systems. 
document systems development 
requests and prepare develop- 
ment specification for internal 
resources or for use in an RFQ 
distributed to external resourc- 
es; prepare and update project 
plans; present project status 
reports to management; and 
prepare reports for management 
using spreadsheets and data 
warehouse tools. 


Competitive Salary. Must have a 
Master's Degree in information 
Systems or related or CIS Equi- 
valent (Bachelor's Degree pius 
five (5) years of experience) 
material planning and user train- 
ing experience, plus application 
development using the following 
languages: MS SQL, Active Ser- 
ver Webpage Design, HTML 
Java, Crystal Reports, and Visio 
Must have legal authority to 
indefinitely work in the U.S 
Please email resume demon 
strating ail minimum require- 
ments to: 
careers@kozyshack.com 
or fax to (516) 870-3097. EOE 


Project Manager: Manage, exe- 
Cute and deliver projects, which 
includes Analysis of user requ- 
irements, design, development 
and testing to automate proces- 
sing and to improve existing 
computer systems. Devise alter- 
natives with clients, designing 
architecture based on web tech- 
nologies using XML, Java, NET 
and webh infrastructure like web 
servers, database servers and 
application/transaction servers. 
Design and architect new com 
puter systems and solution uti- 
lizing Rational Rose, JBuilder, 
Poseidon, CodeWarrior, Visual 
Café, and Visuai Source Safe. 
Manage projects in J2EE, Dot 
Net Technology, ASP.Net, VS- 
Net, C#, Biz Talk, and Oracle 
Work on multiple operating sys- 
tems such as Unix and Windows 
NT/2000 environment. Masters 
or Equivalent in Computer Sci- 
lence, MIS, CIS, Engineering 
(any field), Business, Technol- 
logy, Mathematics or related 
field. Minimum two years of 
experience in the computer 
related field in the above job 
duties. Salary will commensu- 
rate with experience. Please 
email resume to: sheridan.porter 
@catalytic.com or mail to 
Catalytic Software, Continental 
Plaza, 550 Kirkland Way, Suite 
404, Kirkland WA 98033. 


Software Project Manager need- 
ed w/Masters or foreign equiv. in 
Engg. or Comp.Scie Math & 
1 yr. exp to plan, organize, direct 
& coordinate IBM mainframe 
based technologies for invest- 
ment Banking s/ware develop- 
ment projects. Design, develop 
& create s/ware applics. using 
industry standard OO&D tech- 
niques, SDLC principles & 
s/ware design patterns. Analyze 
application s/ware w/IDMS 
DB2, Eazytrieve, COBOL. CICS 
PL/1 & Java. Gather system 
requirements from clients & 
translate in the form of UML dia- 
grams & RUP documents. De- 
velop, maintain & track compre- 
hensive project plans using MS 
Project. 1 yr exp as a Software 
Analyst is acceptable. Supv. 2 
employees. Send resumes to: 
BCC USA, Inc. 43 Stouts Lane. 
Monmouth Junction, NJ 08852 
Job location: Monmouth Junc- 
tion, NJ or in unanticipated loca- 
tions in the U.S 
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Software Engineers: NuWare 
Technology Corporation is look- 
ing for Software Engineers with 
relevant degree and exp in 
some of the following areas or 
combination thereof. Analyze 
design, develop and deploy 
business applications including 
but not limited to Data Ware- 
house and Business Intelligence: 
System using some of the fol- 
lowing or combination thereof. 
ERWIN, COGNOS, Sybase 
UNIX or NT, Control-M, Java- 
script, HTML, Crystal Reports. 
Visual Basic, ASP, J2EE, C++ 
Visual Studio.net, XML, XSL 
WebServices, Oracle/Sybase/ 
SQLServer, Weblogic/Websph- 
ere/MQSeries. Top $$. Mail res 
ume to: NuWare Technology 
Corporation, 120 Wood Avenue 
South, Suite 404, Iselin, NJ 
08830 


Mergent, Inc. seeks Technical 
Project Leader, Asian Markets 
for Charlotte office to design 
develop & implement financial 
input systems & products for 
Asian & other regional mkts 
Designs & coordinates software 
efforts w/contracted software 
developers & clients in Asia 
Req. M.S. in Comp Sci, Comp 
Eng or Bus Admin & 4 yr exp to 
incl network programming & 
devpmt of multi-threaded data 
systems appls for corporate 
municipal & govmt financial info 
systems data capture w/Deiphi 6 
or higher, object-oriented design 
programming & HTML, Java, & 
Perl or similar. Req fluency in 
English & Mandarin. Resume to 
VP HR & Administration 
Mergent, Inc., 5250 77 Center! 
Dr, Ste 150, Charlotte, NC 
28217. No relocation. No calls or 
in person applications accepted 


BUSINESS MANAGEMENT 
ANALYST w/Bach or foreign 
equiv in Bus Admin or Acctg & 
HR Mgmt & 2yrs exp to analyze’ 
business SOPs. Gather info 
from business user to dsgn & 
impimt effective solutions by 
creating business plans, func- 
tional specs using MS Project. 
Caliber RM, MS Visio, Excel 
Word, IBM Rational Requisite 
Pro. Review project plan & 
impimt same. Mail resumes to 
KGF Associates, Inc., 777 
Washington Rd, Parlin, Ste 1, 
NJ 08859. Job Loc: Parlin, NJ 
or any unanticipated locations 
in the USA. 


Seeking qualified applicants for 
the following position in Prince- 
ton, NJ: Programmer/Analyst 
Design, develop, configure 
code, implement, edit, and 
maintain user application pro- 
grams. Modify existing applica- 
tion and provide systems sup- 
port. Analyze user's requirement 
to enhance system perfor 
mance. Req. BS or equivalent in 
CS, CIS, MIS, ME, EE, CE or 
related field with 5 yr. exp. in job 
offered. Must be proficient in 
ERP, SAP and PeopleSoft 
Willing to re-locate in USA as 
needed. Send resume to 
kumar@e-zencomp.com. 


Computer Professional (Plains- 
boro) NJ based IT firm, Jr. Lvi 
Posi's Progmr Analysts, S/ware 
Engrs, Syss Analysts, to dvlop, 
create, modify general computer 
applic’s s/ware or specialized 
utility programs. Analyze user 
needs & dviop s/ware solutions. 
Sr. Lvl Posi'n, IT Managers, MIS 
Managers, ITS Directors needed 
to plan, direct, or coordinate 
activities in such fields as elec- 
tronic data processing, informa- 
tion systems, systems analysis, 
and computer programming 
Apply w/ 2 corics of resume to 
H.R.D, Accurate Software Inter- 
national, Inc., 408 B, Plainsboro 
Road, Plainsboro NJ 08536. 


Sr. Database Admn., Ft 
Lauderdale; Design, Develop, 
Test, Install, Deploy, Inte- 
grate, Enhance & Admn. Da- 
tabases Applying Knowledge 
Of Database Management 
Systems Such As Peri, Sql, 
PI/Sq!, Java/Xmi & Vb/Asp/ 
Sq! Server Environments, 
Com/Com+/Dcom. Establish 
& Maintain Security & Integrity 
Controls. Reqd. B.S.C.S & 2 
Yrs Exp. M-F, 40hrs/Wk. Fax 
Resume to Capital Furniture 
Distributing 954-485-0022 


Oracle Applications Software 
Engineer. Bachelor's degree or 
foreign equiv. in computers or 
electrical engineering. 3 yrs 
experience as Computer Soft- 
ware Engineer. 3 yrs. experi- 
ence must consist of implemen- 
tation, system admin, custom- 
ization, configuration, integration 
with APi data feeds and support 
or Oracle E-Business Suite 11i 
in (1) Oracle Financials AP, AR. 
GL, CM, and FA; (2) Oracle Pur- 
chasing; and (3) i-procurement 
modules through Unix Sun 
Solaris or Linux environments 
Please email resumes to 
deborah.meacham@acnty.com 


Computer Programmer 
for tech consultants in 
Coral Gables Fl. Must 
have bachelor degree in 
computer science. Will 
convert project specs for 
coding to computer lan- 
guage. Develop/write 
programs to _ store, 
retrieve data; will pro- 
gram web sites. Resume 
to Auxis, 55 Miracle Mile, 
#300, Coral Gables, FI 
33134 


IT Manager needed for 
(Merrimack) NH based IT 
firm to Plan, direct, or coor- 
dinate activities in Software 
Configuration Management 
and Release Engineering 
Should have hands on ex- 
perience in systems analy- 
sis, Rational tools, UCM, 
Database, Visual Basic and 
Peri. Apply with 2 copies of 
resume to H.R. Dept, 
Roshitech, Inc., 5 Castleton 
Court, Merrimack, NH 
03054 


Trans American Power Prod- 
ucts, Inc., located in Houston, 
Texas, a leader in the manu- 
facturing of steel poles, seeks 
an experienced software en- 
gineer to: develop and imple- 
ment ERP using .NET piat- 
form and MFC, maintain and 
design SQL for different appli- 
cations and develop CNC 
software applications used in 
the engineering of products. 
Send resume to: President, 
2427 Kelly Lane, Houston, 
Texas 77066. Put job code’ 
AF123 on resume 


Find out how to get the most out of 
your job search and your career. 


Computerworld’s 
Careers Knowledge 
Center 


Call for Nominations 


iP Commumications 
a new way to communicate. 
ons © Busnes 


Careers Advice 
nae Coreers Weblog 


om 


Get the latest industry news, as well 
as valuable job- seeking and career 
enhancement advice. 


Read about IT-related issues such as: 
Hiring/recruiting 
Education/training 
Consulting/contracting 
Skills 


Remember, knowledge is power, 
and the Careers Knowledge Center 
is the place to get it! 


Go to www.computerworld.com today. 
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Continued from page 1 


or not at all improve the capi- 
tal positions of banks. 

The measure requires that 
by 2007 all European banks 
and the largest banks in the 
USS. tighten integration of 
back-office systems and use 
more-sophisticated risk man- 
agement tools to lower the 
amount of capital that must be 
set aside to cover operational 
and credit risks. Other U.S. 
banks are opting into the ac- 
cord voluntarily. 

Adam Stone, a security man- 
agement analyst who asked 
that his financial services com- 
pany not be named, said bank- 
ing leaders are painting a rosy 
picture about the cost of Basel 
II in the belief that implemen- 
tation will reduce risk. 

“Organizations are just now 
figuring out how expensive 
this thing is and are starting 
to cry about it,” he said. 

Stone said he believes that 
over the next decade, regu- 
lators will force Basel II to 


Continued from page 1 
s 
Microsoft 


tion Server, which is needed 
for enterprise team develop- 
ment. The release will include 
a so-called Go Live license, 
which will allow companies to 
begin using the tool set to 
build and deploy applications, 
according to a statement from 
Soma Somasegar, vice presi- 
dent of Microsoft’s developer 
division. The Go Live license 
doesn’t include support and 
patch updates from Microsoft, 
according to the company’s 
Web site. 

Somasegar did say that all 
data within the third beta ver- 
sion of the foundation server 
will migrate seamlessly to the 
final version of the server. 

Aaron Zupancic, a Salt Lake 
City-based senior software ar- 
chitect at Experlogix Inc., said 


may be purchased fr 
om. E-mail: reprints@c 


$250 per year; Europe 





$295 per year: all other countrie 


The thing that 
makes it diffi- 


| cult is that actual 


Basel requirements 
are not finalized. 


| GROUP RISK MANAGEMENT DIRECTOR, 


STANDARD BANK GROUP LTD. 


| trickle down to all large U.S. 


banks and then to insurance 
companies. 

“T believe that it will be a 
natural evolution,” Stone said. 
“First large banks, then medi- 
um and small banks, and then 


| credit unions. Insurance regu- 
| ° 
lators are already taking no- 


tice of Basel.” 

The Bank for International 
Settlements, a Basel, Switzer- 
land-based organization in- 
tended to foster international 
monetary and financial coop- 
eration, is overseeing devel- 


| opment and implementation 


of the Basel II standards. 
From an IT standpoint, the 

proposal calls for banks to 

take steps such as developing 


the delay could prompt his 
company to push back the use 
of VS Team System by its in- 
ternal developers. Experlogix 
plans to replace the Vault 
source-control software from 
SourceGear LLC with Team 
System to help its dispersed 
teams collaborate, he said. 
Zupancic, also president of 
the Utah .Net User Group, said 
Team System’s integration with 


| Microsoft’s SharePoint portal 


software will help the develop- 
ment teams too. “When creat- 
ing a new project, you can im- 


| mediately tie it to a SharePoint 


portal site and have team mem- 
bers share comments and doc- 
uments,” he said. 


| Anticipated Interest 


Brian Randell, a senior consul- 


| tant at MCW Technologies 


Inc., a consulting firm in Los 
Angeles, said that because Mi- 
crosoft will be issuing Go Live 





NEWS 


rules-based risk management 
engines and knitting together 
customer databases across en- 
tire enterprises. But compli- 
ance work has been more dif- 
ficult than expected and 
progress is slower than antici- 
pated, according to users and 
research firms. 

“The thing that makes it dif- 
ficult is where actual Basel re- 
quirements are not finalized. 
You have to make assumptions, 
for example with the risk cal- 
culator,” said Annelie Schnaar- 
Campbell, director of group 
risk management at Standard 
Bank Group Ltd. in Johannes- 
burg, South Africa. 

The bank is three years into 
its Basel II implementation 
and is in the process of mak- 
ing enhancements to its credit- 
writing systems, collateral 
management systems, expo- 
sure and debt-limit manage- 
ment systems, and loss data 
systems. It is also implement- 
ing a new capital calculation 


| tool, Schnaar-Campbell said. 


According to the Accenture 
survey, executives at nearly 
half of 66 banks interviewed 


| licenses in November, many of 


his clients can now begin pilot 

projects with Team System. 
Most, he said, are “chomp- 

ing at the bit” to upgrade from 


isual Studio 
2005 Ti 


System 


Access to .Net Framework 2.0 
and support for building tools that 
extend the Visual! Studio integrat- 
ed development environment. 


» Virtual designers let architects, 
operations managers and devel- 
opers design service-oriented 
applications that can be validated 
against operational environments. 


Advanced load testing to en- 
able teams to verify performance 
of application before deployment. 


Team Foundation Server allows 
dispersed teams to manage and 
track the progress of projects. 


40063800. CANADIAN POSTM/ 
Mass. 01701-917 








JRE LTD 


SOURCE: ACCENT 


said they each expect to 
spend in excess of $61 million 
through 2007 on Basel II com- 
pliance, up from 23% of exec- 
utives in Accenture’s 2004 
Basel II survey. 

TowerGroup in Needham, 


Problems 
With Basel Il 


An Accenture survey of large 
banks found the following: 

= Basel Il compliance is more 

difficult than expected. 


= Progress toward compliance 
is slower than anticipated. 


= Bankers expect to spend signif- 
icantly more funds on Basel !l 
compliance compared with last 
year's estimates. 


Co eeeeeeeereseseseeeevesses 


= Nearly half of the surveyed 
banks plan additional spending 
to realize more benefits than 
mere compliance. 

= Seventy-nine percent of 
respondents said they expect 
Basel Il to improve their capital 
positions slightly or not at all. 


Microsoft’s Visual SourceSafe 
source-control tools to VS 
Team System because of its 
advanced reporting capabili- 
ties and metrics features. 

Melinda-Carol Ballou, an an- 
alyst at market research firm 
IDC, said vendors such as Mi- 
crosoft are targeting corporate 
users’ emerging need to better 
manage extended develop- 
ment teams while adhering to 
increasingly rigid regulatory 
and compliance policies. 

Some users, meanwhile, 
are ramping up other tools to 
better manage development 
teams. TextWise LLC, a build- 
er of text-processing tools in 
Rochester, N.Y., began using 
an enterprise blogging tool in 
April from Traction Software 
Inc. to replace e-mail threads 
for collaboration. 

The TeamPage blog soft- 
ware allows the company’s de- 
velopment teams in Rochester, 
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Mass., estimates that the U.S. 
financial industry will spend 
$12 billion by next year com- 
plying with the Basel II re- 
quirements. 

“We figured between 50% 
and 70% of the costs are IT- 
related. I think people also 
underestimated the business 
process and organizational im- 
pact,” said Andrew Wilson, a 
partner for risk and regulatory 
management at Accenture. 

Wilson said IT organiza- 
tions will be affected by the 
amount of data that has to be 
collected to create accurate 
data models to compute the 
operational risk. They will 
also need to set aside capital 
to cover that risk. 

IT managers can expect 
their environments to be af- 
fected on several levels. For 
example, they will have to 
store and maintain more data 
for longer periods of time, 
standardize data-collection 
systems, and roll out more- 
advanced analytical and re- 
porting tools and predictive 
analysis tools, said Wilson. 
@ 56461 


Baltimore, Boston and Syra- 
cuse, N-Y., to post design notes 
and status reports, said Rob 
Rubin, TextWise’s chief tech- 
nology officer. 

To date, the company has 
had 1,200 blog postings, and 
this month it was able to avoid 
a 30-day setback to the devel- 
opment cycle because one 
group noticed a planned test- 
ing duplication on the blog, 
Rubin added. 

Thomson Elite, which pro- 
vides software to law firms, 
uses Borland Software Corp.’s 
StarTeam configuration man- 
agement tools for its 200 de- 
velopers in teams in Turkey, 
New Zealand and several U.S. 
locations. 

Since it began using the 
system several years ago, the 
group has improved its pro- 
ductivity by about 35%, said 
Adina Kram, Thomson’s re- 
lease coordinator. @ 56458 
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WORK FOR A HOSPITAL management company in the 
Midwest that works with 30 very small rural communi- 


ty hospitals. Not one of our hospitals is ready for elec- 

tronic health records. They are not even close to giving 

up paper. I guarantee you there are more hospitals that 
do not have EHR than those that do.” 

This network manager who wrote to me is right. When I said a 
few weeks back [QuickLink 55837] that “hospitals have made the 
transition over the past decade” to EHR, I was wrong. True, many 
large health care organizations have put EHR in place. But the rest of 
the health care world has a big challenge ahead. 


Wait, check that: A better way to say it is 
that because many doctors and small hospitals 
aren’t using EHR, everyone in health care faces 
a big challenge. 

Why? It’s the network effect. Remember Met- 
calfe’s Law: The more users who can communi- 
cate with one another on a network, the more 
valuable the network is. 

Sure, EHR can save some money internally 
for each organization that implements it. But 
the big value comes when lots of organizations 
can exchange medical records efficiently. 

And the lack of widespread use of EHR actu- 
ally adds cost for organizations that use it. 
Every time one of those small community hos- 
pitals sends a patient to a big health care orga- 
nization with actual paperwork, that paper has 
to be converted to electronic records. Then the 
EHR has to be printed on paper again for the 
patient’s file when he goes back home. 

That means we can’t treat EHR as a competi- 
tive advantage that we keep for ourselves. We 
have to spread it around as widely as possible. 
Otherwise we can’t realize the biggest benefits 
— including the largest cost savings. 

That’s not unique to EHR. For ex- 
ample, no company can get maxi- 
mum advantage alone from RFID; 
everyone on the supply chain has to 
use it. And Internet retailing only 
works when all customers and sup- 
pliers use the same Web protocols. 

But that’s not the way we’re used 
to thinking about IT’s benefits. And 
it’s not the way we usually sell new 
IT initiatives to top management. 

It’s one thing to say, “We need to 
adopt this technology to get an ad- 
vantage over the rest of our indus- 





try.” It’s quite another to argue, “We need to get 
the rest of our industry to adopt this technolo- 
gy sO we can maximize our benefit from it.” 

In the case of EHR, it’s especially sticky: 
These are patients, not products, so there’s no 
chance of a Wal-Mart-style “adopt this or we 
won't buy from you” ultimatum. 

But big health care organizations still have a 
big interest in getting small hospitals, clinics 
and medical practices on board with EHR. It’s 
the only way to get a big-time payback from 
their own EHR spending. 

Making that happen won’t be easy. The costs 
of software, hardware, implementation, training 
and running the systems aren’t trivial. Distrib- 
uting less-expensive EHR software like Vista- 
Office is a start, but more will need to be done. 

For big health care players, will that mean 
contributing improvements to the Vista-Office 
software? Partnering with small hospitals to 
train IT and medical staff? Donating equip- 
ment? Lobbying for the health care equivalent 
of the Rural Electrification Act? 

I don’t know. But short of a real push, big 


: health care organizations won’t get 


the ROI they want from EHR. And 
as that network-manager reader 
put it, “those that do not have EHR 
will not be ready in the next few 
years — or the next 10 years.” 

Incidentally, in response to read- 
ers who asked where to find Vista- 
Office EHR and the open-source 
Open Vista, try the Vista-Office 
Web site (www.vista-office.org) and 
WorldVista (www.worldvista.org). 
Open Vista is available now; Vista- 
Office EHR is still scheduled to be 
out this month. @ 56431 
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You Win Some, You Lose Some 
For weeks after new servers are installed, this com- 

puter room can't stay cool. “The plant engineer in- 

stalled a red warning light so we could see if the tem- 
perature exceeded 78 degrees, and it was always on,” 
says a sysadmin pilot fish. “I pointed it out for weeks, 
expecting them to do something, Finally the light was. 
out, and | thanked them for fixing the cooling problem. 
No problem, they answered, glad we finally got it fixed 
for you.” But next day it’s hotter than ever - and the 

red light is still off. “It wasn’t fixed,” sighs fish after in- 


vestigating. “The light bulb had just burned out.” 


Don’t Ask 


Bact comes” SHARK 
TANK. 


: fish, in its entirety: “I 
: my desktop ~ I’m not 

: sure what. | was trying 
: to delete something and 
: deleted whatever this 
: the empty space be- 

: and Microsoft Access. It 
: thing I needed, or else 
? it wouldn’t have been 

: there, but I'm at a loss 
: for what it was. Is there 
: any way you can get it 
? back for me without 

: knowing what it was? 


: What a Concept! 

: After user’s hard drive is 
: bers a file that wasn’t 

? transferred to the new 

: disk ~ and it has infor- 

i knew the old one went 
: to.a storage room full of 
: drives,” says a pilot fish 
ent problem and asks for 
: she asked us to retrieve 
: it, we did so in a few 

: moments.” Amazed 

: user: How did you find 
? my old drive so quickly 


down from 
management: 
All workstations 
must be set to lock up 
after 15 minutes of in- 
activity. That's inconve- 
nient for this pilot fish 
and his group, whose 
members often leave 
their desks for short pe- 
riods. “One of my co- 
workers challenged our 
local IT admin to show 
him where in the corpo- 
rate policy manual this 
rule was stated,” says 
fish. Admin dutifully 
tracks it down and, sure 


Timing Is 
E : 


Help desk pilot fish 
needs data on a particu- 
lar user’s hard drive at a 
remote site, so he heads 
off to fetch the unit. Not 
very long afterward, the 
same user phones the 
help desk about a differ- 


fish by name. Sorry, he’s 
not here, tech tells her. 
She hangs up, turns 
around - and there’s 
fish, standing in her 


“Wow! You help desk 


Give Us 
A Hint? 
User’s plea to 
support pilot 


on the scene. “But when 


in that hard-disk grave- 





| WON'T PUT YOUR NAME ON IT. Send me your 

true tale of IT life at sharky@computerworld.com. 
You'll score a sharp Shark shirt if | use it. And check out the 
daily feed, browse the Sharkives and sign up for Shark Tank 
heme Ghee crepeereninennnety. 





DB2. ONLY THE PERFORMANCE IS HIGH. 


anc Support fo 


Why not move up to middleware that makes sense? Now you 
can get IBM DB2 Universal Database or Informix by taking 
advantage of our extremely compelling trade-up program. 
Visit ibm.com/db2/swap today to find out if you qualify. 
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the global standard. other wireless carrier. : to business people. 


gets Corporate 
Express there in no time. 


With its 24/7 dedicated business 

service team, Cingular gave 

Corporate Express the support, 

training, and technology needed jg 

to migrate from a paper-based 

delivery system to a real-time 

wireless solution. From system 

installation and operation to 

employee training, the Cingular 

service team ensured a seamless 
transition to the ALLOVER™ network, the largest digital voice and 
data network in America. For the leader in office supplies, Cingular 


increased driver productivity while reducing administrative costs. 


CINGULAR MAKES BUSINESS RUN BETTER 


* cingular 
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Find out how Cingular can make your business run better: 
CALL your account representative -or- CLICK cingular.com/businessleader 
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